Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-8759
3.5
LOWCVSS v2
Published
January 8, 2016
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Cross-site scripting (XSS) vulnerability in the typoLink function in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote authenticated editors to inject arbitrary web script or HTML via a link field.
TYPO3/typo3
GitHubThe TYPO3 Core - Enterprise Content Management System. Synchronized mirror of https://review.typo3.org/q/project:Packages/TYPO3.CMS
GitHubThe TYPO3 Core - Enterprise Content Management System. Synchronized mirror of https://review.typo3.org/q/project:Packages/TYPO3.CMS= 6.2.1, = 6.2.8, = 6.2.0, = 7.0.0, = 7.6.0, = 6.2.4, = 7.0.2, = 6.2.5, = 6.2.11, = 7.5.0, = 6.2.3, = 6.2.2, = 6.2.15, = 6.2.14, = 7.4.0, = 7.3.0, = 6.2.12, = 7.3.1, = 7.2.0, = 6.2, = 7.1.0, = 6.2.9, = 6.2.10, = 7.6.1, = 6.2.7, = 6.2.6, = 6.2.13NVD