← Back

CVE-2013-7074

nvd nist
Published: Dec 21, 2013Modified: Apr 29, 2026

JSON object

Loading...
3.5
Vector
AV:N/AC:M/Au:S/C:N/I:P/A:N
Exploitability: 6.8 / Impact: 2.9
Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Content Editing Wizards in TYPO3 4.5.x before 4.5.32, 4.7.x before 4.7.17, 6.0.x before 6.0.12, 6.1.x before 6.1.7, and the development versions of 6.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters.

Affected (71)

Products: Typo3: Typo3
1 product
Typo3
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Typo3
Version 6.1.1
Version 6.1.2
Version 6.1.3
Version 6.1.4
Version 6.1.5
Version 6.1.6
Version 6.1
Configuration B
17 vulnerable
Vulnerable SoftwareAffected Versions
Typo3
Version 4.7.0
Version 4.7.10
Version 4.7.11
Version 4.7.12
Version 4.7.13
Version 4.7.14
Version 4.7.15
Version 4.7.16
Version 4.7.1
Version 4.7.2
Version 4.7.3
Version 4.7.4
Version 4.7.5
Version 4.7.6
Version 4.7.7
Version 4.7.8
Version 4.7.9
Configuration C
3 vulnerable
Vulnerable SoftwareAffected Versions
Typo3
Version 6.2.0 beta1
Version 6.2.0 beta2
Version 6.2.0 beta3
Configuration D
32 vulnerable
Vulnerable SoftwareAffected Versions
Typo3
Version 4.5.0
Version 4.5.10
Version 4.5.11
Version 4.5.12
Version 4.5.13
Version 4.5.14
Version 4.5.15
Version 4.5.16
Version 4.5.17
Version 4.5.18
Version 4.5.19
Version 4.5.1
Version 4.5.20
Version 4.5.21
Version 4.5.22
Version 4.5.23
Version 4.5.24
Version 4.5.25
Version 4.5.26
Version 4.5.27
Version 4.5.28
Version 4.5.29
Version 4.5.2
Version 4.5.30
Version 4.5.31
Version 4.5.3
Version 4.5.4
Version 4.5.5
Version 4.5.6
Version 4.5.7
Version 4.5.8
Version 4.5.9
Configuration E
12 vulnerable
Vulnerable SoftwareAffected Versions
Typo3
Version 6.0.10
Version 6.0.11
Version 6.0.1
Version 6.0.2
Version 6.0.3
Version 6.0.4
Version 6.0.5
Version 6.0.6
Version 6.0.7
Version 6.0.8
Version 6.0.9
Version 6.0

References (14)

Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.