TI-2024-22695 Aliases CVE-2024-34355 GHSA-xjwx-78x7-q6jc

TYPO3 vulnerable to an HTML Injection in the History Module

LOW 25CWE-116Published 2024-05-14 · Updated 2024-08-02

Key facts

Attack vector: Network
Privileges required: Low
User interaction: Required
Attack complexity: Low
Impact type: Cross-site scripting
Confidentiality · integrity · availability: Low · Low · None
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub. Impact type from CWE-79.

Summary

TYPO3 is an enterprise content management system. Starting in version 13.0.0 and prior to version 13.1.1, the history backend module is vulnerable to HTML injection. Although Content-Security-Policy headers effectively prevent JavaScript execution, adversaries can still inject malicious HTML markup. Exploiting this vulnerability requires a valid backend user account. TYPO3 version 13.1.1 fixes the problem described.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00586 48th percentileScored 2026-11-07

Fix Fixed typo3 (TYPO3): 13.1.1typo3/cms-core (Packagist): 13.1.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
TYPO3	typo3	13.0.0 to before 13.1.1	13.1.1	Patch available	CNA
—	typo3/cms-core (Packagist)	13.0.0 to before 13.1.1	13.1.1	Patch available	GHSA-xjwx-78x7-q6jc

typo3 VendorTYPO3 Affected 13.0.0 to before 13.1.1 Fixed in 13.1.1 Patch available CNA
typo3/cms-core (Packagist) Vendor— Affected 13.0.0 to before 13.1.1 Fixed in 13.1.1 Patch available GHSA-xjwx-78x7-q6jc

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:typo3:typo3::::::::	13.0.0 to before 13.1.1	Vulnerable	TYPO3

cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:* Versions 13.0.0 to before 13.1.1 Vulnerable ·TYPO3

Remediation

Fix · CNA typo3 (TYPO3) Fixed in 13.1.1
Fix · GHSA-xjwx-78x7-q6jc typo3/cms-core (Packagist) Fixed in 13.1.1 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2024-34355
2026-10-03 Alias added: GHSA-xjwx-78x7-q6jc

References

Patch 1

https://github.com/TYPO3/typo3/commit/56afa304ba8b5ad302e15df5def71bcc8d820375

Advisory 3

Other 1

https://github.com/TYPO3/typo3

TI-2023-10314 Persisted Cross-Site Scripting in Frontend Rendering in typo3 CVSS 3.1HIGH 8.8
TI-2010-03538 The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3… CVSS 2.0HIGH 7.1
TI-2009-00775 The jumpUrl mechanism in class.tslib_fe.php in TYPO3 3.3.x through 3.8.x, 4.0 before… CVSS 2.0MEDIUM 5.0
TI-2009-00241 The Indexed Search Engine (indexed_search) system extension in TYPO3 4.0.0 through 4.0.9… CVSS 2.0HIGH 10.0
TI-2020-08940 Improperly Controlled Modification of Dynamically-Determined Object Attributes in TYPO3 CMS CVSS 3.1CRITICAL 10.0
TI-2011-03994 Improper authentication in TYPO3 CVSS 3.1CRITICAL 9.8

See all 217 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences