Security Advisory

CVE-2018-6905

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-04-08 17:00:00

Last updated 2024-08-05 06:17:17

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The page module in TYPO3 before 8.7.11, and 9.1.0, has XSS via $GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename'], as demonstrated by an admin entering a crafted site name during the installation process.

← Browse all CVEs View on cve.org ↗