GHSA-xx7m-8rq2-cw2vMediumCVSS 5.4

TYPO3 CMS indexed search Cross-site Scripting vulnerability

Published
May 17, 2022
Last Modified
April 14, 2025

🔗 CVE IDs covered (1)

CVE-2015-8756 →

📋 Description

Cross-site scripting (XSS) vulnerability in the search result view in the Indexed Search (indexed_search) component in TYPO3 6.2.x before 6.2.16 allows remote authenticated editors to inject arbitrary web script or HTML via unspecified vectors.

🎯 Affected products1

  • composer/typo3/cms:>= 6.2.0, < 6.2.16

🔗 References (5)