Lucene search
Veracode Vulnerability DatabaseVERACODE:29813HistoryMar 24, 2021 - 6:15 a.m.
Cross-site Scripting (XSS)
2021-03-2406:15:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
typo3
cross-site scripting
authenticated user
malicious script
descriptioncolumn
previewed.
EPSS
0.001
Percentile
26.2%
typo3/cms-backend is vulnerable to cross-site scripting. An authenticated malicious user is able to inject and execute malicious script via the descriptionColumn when their content gets previewed.
Related
openvas
openvas
TYPO3 XSS Vulnerability (TYPO3-CORE-SA-2021-007)
2021-03-30 00:00:00
friendsofphp
friendsofphp
TYPO3-CORE-SA-2021-007: Cross-Site Scripting in Content Preview
2021-03-16 09:01:14
TYPO3-CORE-SA-2021-007: Cross-Site Scripting in Content Preview
2021-03-16 09:01:14
nvd
nvd
CVE-2021-21340
2021-03-23 02:15:12
cvelist
cvelist
CVE-2021-21340 Cross-Site Scripting in Content Preview
2021-03-23 01:50:34
osv
osv
CVE-2021-21340
2021-03-23 02:15:12
Cross-Site Scripting in Content Preview
2021-03-23 01:53:47
BIT-typo3-2021-21340
2024-03-06 11:11:15
prion
prion
Cross site scripting
2021-03-23 02:15:00
typo3
typo3
Cross-Site Scripting in Content Preview
2021-03-16 00:00:00
github
github
Cross-Site Scripting in Content Preview
2021-03-23 01:53:47
cve
cve
CVE-2021-21340
2021-03-23 02:15:12