Vulnerability Details CVE-2020-8091
svg.swf in TYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to 7.1.0 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system. This may be at a contrib/websvg/svg.swf pathname.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.209
EPSS Ranking 95.3%
CVSS Severity
CVSS v3 Score 4.8
CVSS v2 Score 4.3
Products affected by CVE-2020-8091
-
cpe:2.3:a:typo3:typo3:6.2.32
-
cpe:2.3:a:typo3:typo3:6.2.33
-
cpe:2.3:a:typo3:typo3:6.2.34
-
cpe:2.3:a:typo3:typo3:6.2.35
-
cpe:2.3:a:typo3:typo3:6.2.36
-
cpe:2.3:a:typo3:typo3:6.2.37
-
cpe:2.3:a:typo3:typo3:6.2.38
-
cpe:2.3:a:typo3:typo3:7.0.0
-
cpe:2.3:a:typo3:typo3:7.0.1
-
cpe:2.3:a:typo3:typo3:7.0.2
-
cpe:2.3:a:typo3:typo3:7.1.0