CVE-2013-5570

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Cross-site scripting (XSS) vulnerability in the Javascript and CSS Optimizer extension before 1.1.14 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/53253Vendor Advisory
http://typo3.org/extensions/repository/view/js_css_optimizerPatch
http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-002/Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/81583
http://secunia.com/advisories/53253Vendor Advisory
http://typo3.org/extensions/repository/view/js_css_optimizerPatch
http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-002/Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/81583

Timeline

Published: Aug 23, 2013
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-55715.9HMailServer 5.3.x and prior: Memory Corruption which could cause DOS CVE-2013-55723.5Zabbix 2.0.5 allows remote authenticated users to discover the LDAP bind password by leveraging management-console access and reading the ld CVE-2013-55734.3Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web sc CVE-2013-55766.8administrator/components/com_media/helpers/media.php in the media manager in Joomla! 2.5.x before 2.5.14 and 3.x before 3.1.5 allows remote CVE-2013-55789.3Buffer overflow in the ToDot method in the WINGRAPHVIZLib.NEATO ActiveX control in WinGraphviz.dll in StarUML allows remote attackers to exe CVE-2013-55804.3The (1) Conn_StartLogin and (2) cb_Read_Resolver_Result functions in conn.c in ngIRCd 18 through 20.2, when the configuration option NoticeA CVE-2013-55827.8Ammyy Admin 3.2 and earlier stores the client ID at a fixed memory location, which might make it easier for user-assisted remote attackers t CVE-2013-55834.3Cross-site scripting (XSS) vulnerability in libraries/idna_convert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary CVE-2013-55864.3Cross-site scripting (XSS) vulnerability in wikka.php in WikkaWiki before 1.3.4-p1 allows remote attackers to inject arbitrary web script or CVE-2013-55872.6Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.13, when MakeClicky is configured, allows remote attackers t CVE-2013-55884.3Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b and earlier allow remote attackers to inject arbitrary web script or HTM CVE-2013-55897.5SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via the