CVE-2015-8758

Description

Multiple cross-site scripting (XSS) vulnerabilities in unspecified frontend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary web script or HTML via unknown vectors.

References

http://www.securitytracker.com/id/1034484

http://www.securityfocus.com/bid/79240

http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-013/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS