Search for vulnerabilities
Vulnerability details: VCID-rnen-s5y6-8yg1
Vulnerability ID VCID-rnen-s5y6-8yg1
Aliases CVE-2015-8759
GHSA-j5v7-9xr5-m7gx
Summary TYPO3 Cross-site Scripting vulnerability Cross-site scripting (XSS) vulnerability in the typoLink function in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote authenticated editors to inject arbitrary web script or HTML via a link field.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00187 https://api.first.org/data/v1/epss?cve=CVE-2015-8759
cvssv3.1 5.4 https://github.com/TYPO3/typo3
generic_textual MODERATE https://github.com/TYPO3/typo3
cvssv3.1 5.4 https://github.com/TYPO3/typo3/commit/25a1473907f0f4b2bb0147c661981940c57a4555
generic_textual MODERATE https://github.com/TYPO3/typo3/commit/25a1473907f0f4b2bb0147c661981940c57a4555
cvssv3.1 5.4 https://github.com/TYPO3/typo3/commit/de1755a6dcff9b037c6d5a1fa340ba100aff054a
generic_textual MODERATE https://github.com/TYPO3/typo3/commit/de1755a6dcff9b037c6d5a1fa340ba100aff054a
cvssv3.1 5.4 https://nvd.nist.gov/vuln/detail/CVE-2015-8759
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2015-8759
cvssv3.1 5.4 https://typo3.org/security/advisory/typo3-core-sa-2015-012
generic_textual MODERATE https://typo3.org/security/advisory/typo3-core-sa-2015-012
cvssv3.1 5.4 https://web.archive.org/web/20200228051548/http://www.securityfocus.com/bid/79250
generic_textual MODERATE https://web.archive.org/web/20200228051548/http://www.securityfocus.com/bid/79250
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2015-8759
https://github.com/TYPO3/typo3
https://github.com/TYPO3/typo3/commit/25a1473907f0f4b2bb0147c661981940c57a4555
https://github.com/TYPO3/typo3/commit/de1755a6dcff9b037c6d5a1fa340ba100aff054a
https://nvd.nist.gov/vuln/detail/CVE-2015-8759
https://typo3.org/security/advisory/typo3-core-sa-2015-012
https://web.archive.org/web/20200228051548/http://www.securityfocus.com/bid/79250
GHSA-j5v7-9xr5-m7gx https://github.com/advisories/GHSA-j5v7-9xr5-m7gx
No exploits are available.
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/TYPO3/typo3
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/TYPO3/typo3/commit/25a1473907f0f4b2bb0147c661981940c57a4555
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/TYPO3/typo3/commit/de1755a6dcff9b037c6d5a1fa340ba100aff054a
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2015-8759
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Found at https://typo3.org/security/advisory/typo3-core-sa-2015-012
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Found at https://web.archive.org/web/20200228051548/http://www.securityfocus.com/bid/79250
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.41031
EPSS Score 0.00187
Published At June 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-01T12:27:06.562916+00:00 GithubOSV Importer Import https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-j5v7-9xr5-m7gx/GHSA-j5v7-9xr5-m7gx.json 36.1.3