Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:25414
HistoryMay 14, 2020 - 7:12 a.m.

Cross-site Scripting (XSS)

2020-05-1407:12:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

EPSS

0.001

Percentile

21.2%

typo3/cms-core is vulnerable to cross-site scripting (XSS). The vulnerability exists as decoded entities generated by the typolink functionality were not encoded back to HTML before it gets rendered.