CVE-2026-47348

Editors with access to create or modify page content were able to include HTML markup in page titles that were stored in the search index without sanitization. When displayed in frontend search results via the Indexed Search plugin, these titles were rendered without proper output encoding, resulting in a Cross-Site Scripting vulnerability. This issue affects TYPO3 CMS versions 13.0.0-13.4.30 and 14.0.0-14.3.2.

CVSS

No CVSS.

References

Link	Resource
https://github.com/TYPO3/typo3/commit/2e96dd0e9fab7ad877b741fb9f6fc645b4270a3e
https://github.com/TYPO3/typo3/commit/8004b91a5951cfe01dda8554f77d0daa82d6b899
https://typo3.org/security/advisory/typo3-core-sa-2026-010

Configurations

No configuration.

History

23 Jul 2026, 08:10

Type	Values Removed	Values Added
Summary		(es) Editores con acceso para crear o modificar contenido de página pudieron incluir marcado HTML en los títulos de página que se almacenaron en el índice de búsqueda sin saneamiento. Cuando se mostraron en los resultados de búsqueda del frontend a través del plugin Indexed Search, estos títulos se renderizaron sin la codificación de salida adecuada, lo que resultó en una vulnerabilidad de cross-site scripting. Este problema afecta a las versiones de TYPO3 CMS 13.0.0-13.4.30 y 14.0.0-14.3.2.

09 Jun 2026, 11:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-06-09 11:16

Updated : 2026-07-23 08:10

NVD link : CVE-2026-47348

Mitre link : CVE-2026-47348

CVE.ORG link : CVE-2026-47348

JSON object : View

Products Affected

No product.

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2026-47348", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-47348", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-09T14:27:03.369832Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "f4fb688c-4412-4426-b4b8-421ecf27b14a", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 5.1, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "PASSIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "f4fb688c-4412-4426-b4b8-421ecf27b14a", "affectedData": [{"repo": "https://github.com/TYPO3/typo3", "vendor": "TYPO3", "modules": ["Indexed Search"], "product": "TYPO3 CMS", "versions": [{"status": "affected", "version": "13.0.0", "lessThan": "13.4.31", "versionType": "semver"}, {"status": "affected", "version": "14.0.0", "lessThan": "14.3.3", "versionType": "semver"}], "packageName": "typo3/cms-indexed-search", "collectionURL": "https://packagist.org", "defaultStatus": "unaffected"}]}], "published": "2026-06-09T11:16:52.583", "references": [{"url": "https://github.com/TYPO3/typo3/commit/2e96dd0e9fab7ad877b741fb9f6fc645b4270a3e", "source": "f4fb688c-4412-4426-b4b8-421ecf27b14a"}, {"url": "https://github.com/TYPO3/typo3/commit/8004b91a5951cfe01dda8554f77d0daa82d6b899", "source": "f4fb688c-4412-4426-b4b8-421ecf27b14a"}, {"url": "https://typo3.org/security/advisory/typo3-core-sa-2026-010", "source": "f4fb688c-4412-4426-b4b8-421ecf27b14a"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "f4fb688c-4412-4426-b4b8-421ecf27b14a", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Editors with access to create or modify page content were able to include HTML markup in page titles that were stored in the search index without sanitization. When displayed in frontend search results via the Indexed Search plugin, these titles were rendered without proper output encoding, resulting in a Cross-Site Scripting vulnerability. This issue affects TYPO3 CMS versions 13.0.0-13.4.30 and 14.0.0-14.3.2."}, {"lang": "es", "value": "Editores con acceso para crear o modificar contenido de p\u00e1gina pudieron incluir marcado HTML en los t\u00edtulos de p\u00e1gina que se almacenaron en el \u00edndice de b\u00fasqueda sin saneamiento. Cuando se mostraron en los resultados de b\u00fasqueda del frontend a trav\u00e9s del plugin Indexed Search, estos t\u00edtulos se renderizaron sin la codificaci\u00f3n de salida adecuada, lo que result\u00f3 en una vulnerabilidad de cross-site scripting. Este problema afecta a las versiones de TYPO3 CMS 13.0.0-13.4.30 y 14.0.0-14.3.2."}], "lastModified": "2026-07-23T08:10:00.137", "sourceIdentifier": "f4fb688c-4412-4426-b4b8-421ecf27b14a"}