Unscored severity · published Jul 1, 2013
CVE-2013-4744
Cross-site scripting (XSS) vulnerability in the PHPUnit extension before 3.5.15 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
–
CVSS
1.4%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the PHPUnit extension before 3.5.15 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
Phpunit · Phpunit Project
before 3.5.15 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4744
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4744
Broken Link
http://osvdb.org/89132
Patch
http://typo3.org/extensions/repository/view/phpunit
Vendor Advisory
http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-001/
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/81194
More from Phpunit
9.8
CVE-2017-9841
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring,…
7.8
CVE-2026-41570
PHPUnit: Argument injection via newline in PHP INI values forwarded to child processes
7.8
CVE-2026-24765
PHPUnit is a testing framework for PHP