CVE-2013-7074 in TYPO3

摘要 (英语)

Multiple cross-site scripting (XSS) vulnerabilities in Content Editing Wizards in TYPO3 4.5.x before 4.5.32, 4.7.x before 4.7.17, 6.0.x before 6.0.12, 6.1.x before 6.1.7, and the development versions of 6.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters.

预定

2013-12-11

披露

2013-12-20

条目

VulDB provides additional information and datapoints for this CVE:

标识符	漏洞	CWE	可利用	对策	CVE
11482	TYPO3 Content Editing Wizard 跨网站脚本	79	未定义	官方修复	CVE-2013-7074