Low, CVSS 1.3PackagistPublished
Static Info Tables (static_info_tables) extension TYPO3 vulnerable to Cross-site Scripting
CVE-2013-5323 · GHSA-6p8h-36qp-8h72
- Affected
- Packagist sjbr/static-info-tables < 2.3.1
- Fixed in
- 2.3.1· Vendor fix available
- Issue
- Cross-site scripting (XSS) vulnerability in the Static Info Tables (staticinfotables) extension before 2.3.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Recommended action: Upgrade to 2.3.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.