GHSA-6p8h-36qp-8h72

Static Info Tables (static_info_tables) extension TYPO3 vulnerable to Cross-site Scripting

Source: GitHub Advisory Database (reviewed) Low CVE-2013-5323

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	sjbr/static-info-tables	< 2.3.1	2.3.1

Details

As written in the advisory (Markdown source, shown as plain text).

Cross-site scripting (XSS) vulnerability in the Static Info Tables (static_info_tables) extension before 2.3.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2013-5323 advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/82212 web
https://github.com/TYPO3-extensions/static_info_tables package
https://web.archive.org/web/20130425011655/http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-004 web
https://web.archive.org/web/20200229090743/http://www.securityfocus.com/bid/58056 web
http://typo3.org/extensions/repository/view/static_info_tables web