Description
The mm_forum extension through 1.9.5 for TYPO3 allows XSS that can be exploited via CSRF.
References (2)
Core 2
Core References
Third Party Advisory x_refsource_misc
https://typo3.org/help/security-advisories
Third Party Advisory x_refsource_confirm
https://typo3.org/security/advisory/typo3-ext-sa-2020-013
Scores
CVSS v3
5.4
EPSS
0.0037
EPSS Percentile
28.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Details
CWE
CWE-352
CWE-79
Status
published
Products (1)
mm_forum_project/mm_forum
< 1.9.5
Published
Jul 07, 2020
Tracked Since
Feb 18, 2026