← Back

CVE-2014-3943

nvd nist
Published: Jun 3, 2014Modified: May 6, 2026

JSON object

Loading...
3.5
Vector
AV:N/AC:M/Au:S/C:N/I:P/A:N
Exploitability: 6.8 / Impact: 2.9
Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 before 6.2.3 allow remote authenticated editors to inject arbitrary web script or HTML via unknown parameters.

Affected (82)

Products: Typo3: Typo3
1 product
Typo3
Configuration A
34 vulnerable
Vulnerable SoftwareAffected Versions
Typo3
Version 4.5.0
Version 4.5.10
Version 4.5.11
Version 4.5.12
Version 4.5.13
Version 4.5.14
Version 4.5.15
Version 4.5.16
Version 4.5.17
Version 4.5.18
Version 4.5.19
Version 4.5.1
Version 4.5.20
Version 4.5.21
Version 4.5.22
Version 4.5.23
Version 4.5.24
Version 4.5.25
Version 4.5.26
Version 4.5.27
Version 4.5.28
Version 4.5.29
Version 4.5.2
Version 4.5.30
Version 4.5.31
Version 4.5.32
Version 4.5.33
Version 4.5.3
Version 4.5.4
Version 4.5.5
Version 4.5.6
Version 4.5.7
Version 4.5.8
Version 4.5.9
Configuration B
14 vulnerable
Vulnerable SoftwareAffected Versions
Typo3
Version 6.0.10
Version 6.0.11
Version 6.0.12
Version 6.0.13
Version 6.0.1
Version 6.0.2
Version 6.0.3
Version 6.0.4
Version 6.0.5
Version 6.0.6
Version 6.0.7
Version 6.0.8
Version 6.0.9
Version 6.0
Configuration C
6 vulnerable
Vulnerable SoftwareAffected Versions
Typo3
Version 6.2.0 beta1
Version 6.2.0 beta2
Version 6.2.0 beta3
Version 6.2.1
Version 6.2.2
Version 6.2
Configuration D
9 vulnerable
Vulnerable SoftwareAffected Versions
Typo3
Version 6.1.1
Version 6.1.2
Version 6.1.3
Version 6.1.4
Version 6.1.5
Version 6.1.6
Version 6.1.7
Version 6.1.8
Version 6.1
Configuration E
19 vulnerable
Vulnerable SoftwareAffected Versions
Typo3
Version 4.7.0
Version 4.7.10
Version 4.7.11
Version 4.7.12
Version 4.7.13
Version 4.7.14
Version 4.7.15
Version 4.7.16
Version 4.7.17
Version 4.7.18
Version 4.7.1
Version 4.7.2
Version 4.7.3
Version 4.7.4
Version 4.7.5
Version 4.7.6
Version 4.7.7
Version 4.7.8
Version 4.7.9

Timeline

No history available yet.