-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
PHPPHPMiggo AIRoot Cause AnalysisThe vulnerability stems from the WordCount plugin's handling of raw HTML content during editor mode switches. When switching to source mode, the plugin processes unsanitized editor content (via editor.getData()) to calculate word/character counts. If this content contains malicious scripts, they are executed when reflected in the UI elements controlled by the plugin. The TYPO3 advisory explicitly links the XSS to the WordCount plugin's source mode interaction, indicating improper input neutralization in its counting logic.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| typo3/cms-rte-ckeditor | composer | >= 9.5.0, < 9.5.42 | 9.5.42 |
| typo3/cms-rte-ckeditor | composer | >= 10.0.0, < 10.4.39 | 10.4.39 |
| typo3/cms-rte-ckeditor | composer | >= 11.0.0, < 11.5.30 | 11.5.30 |
Ongoing coverage of React2Shell