PT-2025-11683 · Packagist · Codingms/Additional-Tca

Publicado 2025-03-19 · Atualizado 2025-03-19 · CVE-2025-30083

OSV

A cross-site scripting (XSS) vulnerability has been discovered in the Additional TCA extension. This vulnerabily is exploitable by a logged in backend user utilizing the TYPO3 backend user interface. This user can create output in the HTML context by exploiting improperly encoded user input. Updates 1.15.17 and 1.16.9 are available for download.

Exploit

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-30083

GHSA-RRH3-CGMX-W62F

Produtos afetados

Codingms/Additional-Tca

Referências · 4

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/codingms/additional-tca/CVE-2025-30083.yaml · Exploit
• https://osv.dev/vulnerability/GHSA-rrh3-cgmx-w62f · Aviso do Fabricante
• https://gitlab.com/codingms/typo3-public/additional_tca · Nota
• https://typo3.org/security/advisory/typo3-ext-sa-2025-002 · Nota