What’s Vulnerable › Vulnerabilities

CVE-2015-8759

• Severity: medium (CVSS 5.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-01-08 · updated 2026-06-17
• Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in the typoLink function in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote authenticated editors to inject arbitrary web script or HTML via a link field.

Affected products

• typo3: 6.2, 6.2.0-alpha1, 6.2.0-alpha2, 6.2.0-alpha3, 6.2.0-beta1, 6.2.0-beta2 (+33)

References

• http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-012/
• http://www.securityfocus.com/bid/79250
• http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-012/
• http://www.securityfocus.com/bid/79250

Get alerted when CVE-2015-8759 or the next vulnerability affects your stack