CVE-2023-35783

The ke_search (aka Faceted Search) extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via indexed data

Medium · published June 16, 2023

CVSS v3.1
6.3
EPSS
0%
Percentile
26.4
In the wild
Unconfirmed
What it is

The ke_search (aka Faceted Search) extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via indexed data.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:N/A:L/C:L/I:L/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00341 · 26.4th percentile
Published
2023-06-16T00:00Z
EPSS history
Timeline
  • 16 JUN 00:00Z
    The ke_search (aka Faceted Search) extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via indexed data
    cvelistv5