Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:27915
HistoryNov 18, 2020 - 2:39 a.m.

Cross-site Scripting (XSS)

2020-11-1802:39:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.001 Low

EPSS

Percentile

42.3%

typo3/fluid is vulnerable to cross-site scripting (XSS). An attacker is able to inject and execute malicious script in a user’s browser via 1) additionalAttributes arrays 2) ViewHelpers 3) Subclasses of AbstractConditionViewHelper.

0.001 Low

EPSS

Percentile

42.3%