CVE-2013-7074 — Cross-site Scripting in CMS

CWE-79 — Cross-site Scripting5 documents4 sources
Severity
3.5LOWNVD
EPSS
0.3%
top 43.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Typo3 CMSTypo3
Timeline
PublishedDec 21
Latest updateMay 17

Description

Multiple cross-site scripting (XSS) vulnerabilities in Content Editing Wizards in TYPO3 4.5.x before 4.5.32, 4.7.x before 4.7.17, 6.0.x before 6.0.12, 6.1.x before 6.1.7, and the development versions of 6.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 6.8 | Impact: 2.9

Affected Packages2 packages

▶Packagisttypo3/cms4.5.0 — 4.5.32+3
▶NVDtypo3/typo369 versions+68

🔴Vulnerability Details

4
GHSA
TYPO3 Cross-Site Scripting (XSS) vulnerabilities in Content Editing Wizards component↗2022-05-17
▶
OSV
TYPO3 Cross-Site Scripting (XSS) vulnerabilities in Content Editing Wizards component↗2022-05-17
▶
CVEList
CVE-2013-7074: Multiple cross-site scripting (XSS) vulnerabilities in Content Editing Wizards in TYPO3 4↗2013-12-21
▶
OSV
CVE-2013-7074: Multiple cross-site scripting (XSS) vulnerabilities in Content Editing Wizards in TYPO3 4↗2013-12-21
▶
CVE-2013-7074 — Cross-site Scripting in Typo3 CMS | cvebase