CVE-2015-5956

Packagist/typo3/cms CVE-2015-5956: low

TYPO3 cross-site scripting (XSS)

Action: Upgrade typo3/cms to 6.2.15 or later.

composer require typo3/cms:6.2.15

composer require typo3/cms:7.4.0

Affected

Fixed versions

Sources

• osv: GHSA-989h-wv8x-933p
• https://nvd.nist.gov/vuln/detail/CVE-2015-5956
• https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2015-5956.yaml
• https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-009
• http://packetstormsecurity.com/files/133551/Typo3-CMS-6.2.14-4.5.40-Cross-Site-Scripting.html
• http://seclists.org/fulldisclosure/2015/Sep/57
• http://www.securityfocus.com/archive/1/536464/100/0/threaded
• http://www.securitytracker.com/id/1033551

CVE-2015-5956 · published 2022-05-14T02:48:01Z · modified 2024-12-07T05:40:59.138352Z · JSON