PHPUnit extension for TYPO3 vulnerable to Cross-site Scripting

MEDIUM 4.3CVE-2013-4744 · GHSA-c5x3-gq36-prrp · Published 01/07/2013 · updated 16/06/2026

Package	Affected versions	Patched versions
oliverklee/phpunit Packagist	`< 3.5.15`	`3.5.15`
phpunit phpunit_project	`< 3.5.15`	`3.5.15`

Description

Cross-site scripting (XSS) vulnerability in the PHPUnit extension before 3.5.15 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

NVD description

Cross-site scripting (XSS) vulnerability in the PHPUnit extension before 3.5.15 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

nvd.nist.gov/vuln/detail/CVE-2013-4744 · ADVISORY
exchange.xforce.ibmcloud.com/vulnerabilities/81194 · WEB
oliverklee/ext-phpunit · PACKAGE
web.archive.org/web/20130129050219/http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-001 · WEB
typo3.org/extensions/repository/view/phpunit · WEB
osvdb.org/89132 · Broken Link
typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-001 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free