CVE-2018-6905

The page module in TYPO3 before 8.7.11, and 9.1.0, has XSS via $GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename'], as demonstrated by an admin entering a crafted…

published April 8, 2018

CVSS
—
EPSS
2%
Percentile
82.1
In the wild
Unconfirmed
What it is

The page module in TYPO3 before 8.7.11, and 9.1.0, has XSS via $GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename'], as demonstrated by an admin entering a crafted site name during the installation process.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02171 · 82.1th percentile
Published
2018-04-08T17:00Z
EPSS history
Timeline
  • 08 APR 17:00Z
    The page module in TYPO3 before 8.7.11, and 9.1.0, has XSS via $GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename'], as demonstrated by an admin entering a crafted…
    cvelistv5