CVE-2013-5307: XSS
Published Aug 16, 2013
·Updated
Cross-site scripting (XSS) vulnerability in the Faceted Search (kesearch) extension before 1.4.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
13 affected components
Kennziffer Ke Search<=1.4.0
Kennziffer Ke Search=0.1.1
Kennziffer Ke Search=0.2.0
Kennziffer Ke Search=0.3.0
Kennziffer Ke Search=1.0.0
Kennziffer Ke Search=1.0.1
Kennziffer Ke Search=1.0.2
Kennziffer Ke Search=1.1.0
Kennziffer Ke Search=1.1.1
Kennziffer Ke Search=1.2.0
Kennziffer Ke Search=1.3.0
Kennziffer Ke Search=1.3.1
Typo3 TYPO3
Remediation
Patch Available
Event History
Aug 16, 2013
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-5307?
CVE-2013-5307 is considered to have a medium severity due to its potential for cross-site scripting (XSS) attacks.
2
How do I fix CVE-2013-5307?
To fix CVE-2013-5307, update the ke_search extension to version 1.4.1 or later.
3
What software is affected by CVE-2013-5307?
CVE-2013-5307 affects all versions of the ke_search extension prior to 1.4.1.
4
What type of vulnerability is CVE-2013-5307?
CVE-2013-5307 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2013-5307 be exploited remotely?
Yes, CVE-2013-5307 can be exploited remotely by attackers to inject arbitrary web scripts or HTML.