-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| typo3/cms-backend | composer | >= 4.2.0, < 4.2.15 | 4.2.15 |
| typo3/cms-backend | composer | >= 4.3.0, < 4.3.7 | 4.3.7 |
| typo3/cms-backend | composer | >= 4.4.0, < 4.4.4 | 4.4.4 |
PHPPHPMiggo AIRoot Cause AnalysisThe vulnerability explicitly cites the RemoveXSS function, and commit diffs (aba23d6/ce47d8d) show the flawed single-pass regex replacement was replaced with a while-loop to handle nested encodings. The backend-related XSS is mentioned in advisories but lacks specific function/file references in the provided data, making it impossible to identify concrete functions with high confidence.
Ongoing coverage of React2Shell