GrepRules
Sign inPublish rule
Explore/cve-2026-47348-typo3-indexed-search-item-title-xss

CVE-2026-47348: Typo3 Indexed Search Item Title Xss

Unsanitized search result titles from indexed search (`item_title` or `titleaddition`) are rendered as raw HTML via `linkPage()`, leading to Cross-Site Scripting (XSS). Ensure the item title is properly encoded using `htmlspecialchars()` before use.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0PHPβ
greprules fetch cve-2026-47348-typo3-indexed-search-item-title-xss --engine opengrep

Description

Unsanitized search result titles from indexed search (`item_title` or `titleaddition`) are rendered as raw HTML via `linkPage()`, leading to Cross-Site Scripting (XSS). Ensure the item title is properly encoded using `htmlspecialchars()` before use.

License
Apache-2.0
Source context
Public repository
Source
Provally CVE rule catalog
Validation status
Verified
Quality signals
145 downloads0 direct145 via packs
· 0 stars · Quality score 77How quality works
Included packs
2 packs