QwikSec

Security Database

CVE

CWE

Training

CVE-2013-7074

Published: Dec 21, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in Content Editing Wizards in TYPO3 4.5.x before 4.5.32, 4.7.x before 4.7.17, 6.0.x before 6.0.12, 6.1.x before 6.1.7, and the development versions of 6.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

[oss-security] 20131212 Re: CVE request: TYPO3-CORE-SA-2013-004 and TYPO3-FLOW-SA-2013-001

mailing-list

x_refsource_MLIST

vdb-entry

x_refsource_BID

[oss-security] 20131211 CVE request: TYPO3-CORE-SA-2013-004 and TYPO3-FLOW-SA-2013-001

mailing-list

x_refsource_MLIST

contenteditingwizards-url-xss(89620)

vdb-entry

x_refsource_XF

http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004

x_refsource_CONFIRM

vendor-advisory

x_refsource_DEBIAN

vdb-entry

x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.