Low severityNVD Advisory· Published Jul 1, 2013· Updated Apr 29, 2026

CVE-2013-4744

Description

Cross-site scripting (XSS) vulnerability in the PHPUnit extension before 3.5.15 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
oliverklee/phpunitPackagist	< 3.5.15	3.5.15

Affected products

Phpunit Project/Phpunit
cpe:2.3:a:phpunit_project:phpunit:*:*:*:*:*:typo3:*:*
Range: <3.5.15

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

typo3.org/extensions/repository/view/phpunitnvdPatchWEB
typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-001/nvdVendor Advisory
github.com/advisories/GHSA-c5x3-gq36-prrpghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2013-4744ghsaADVISORY
osvdb.org/89132nvdBroken Link
exchange.xforce.ibmcloud.com/vulnerabilities/81194nvdVDB EntryWEB
web.archive.org/web/20130129050219/http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-001ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.065
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000