← All advisories

Medium severity6.1NVD Advisory· Published Jul 9, 2019· Updated Jun 17, 2026

CVE-2019-12748

CVE-2019-12748

Description

TYPO3 8.3.0 through 8.7.26 and 9.0.0 through 9.5.7 allows XSS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
typo3/cms-corePackagist	>= 8.0.0, < 8.7.27	8.7.27
typo3/cms-corePackagist	>= 9.0.0, < 9.5.8	9.5.8
typo3/cmsPackagist	>= 8.0.0, < 8.7.27	8.7.27
typo3/cmsPackagist	>= 9.0.0, < 9.5.8	9.5.8

Affected products

4

TYPO3/Typo3
cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*
Range: >=8.3.0,<=8.7.26
TYPO3/TYPO3description
ghsa-coords2 versions
pkg:composer/typo3/cms pkg:composer/typo3/cms-core
>= 8.0.0, < 8.7.27+ 1 more
- (no CPE)range: >= 8.0.0, < 8.7.27
- (no CPE)range: >= 8.0.0, < 8.7.27

Patches

Vulnerability mechanics

References

7

github.com/advisories/GHSA-r6fv-56gp-j3r4ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-12748ghsaADVISORY
typo3.org/security/advisory/typo3-core-sa-2019-015/nvdVendor Advisory
github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-12748.yamlghsaWEB
github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-12748.yamlghsaWEB
typo3.org/cms/release-news/typo3-8-release-notesghsaWEB
typo3.org/security/advisory/typo3-core-sa-2019-015ghsaWEB

News mentions

0

No linked articles in our index yet.