pradeepjairamani/TYPO3-XSS-POC

PoC

Typo3 -v9.1.0 Persistent Cross Site Scripting(XSS) Assigned CVE Number: CVE-2018-6905

view exploit source poc_in_githubauthor pradeepjairamanipublished 2018-04-08catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-6905US	medium4.8	2.17% (82nd)	Exploit	2018-04-08
The page module in TYPO3 before 8.7.11, and 9.1.0, has XSS via $GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename'], as demonstrated by an admin entering a crafted site name during the i…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.