CVE-2013-5307: Cross-site scripting (XSS) vulnerability in the Faceted Search (ke_search) extension before 1.4.1 for TYPO3...

Security readout for executives and security teams

This is an old cross-site scripting issue in the TYPO3 Faceted Search extension, ke_search, before version 1.4.1. A successful attacker could inject script or HTML into affected pages. The public record does not provide the exact vector, severity score, or evidence of active exploitation. Exposure is likely limited to TYPO3 installations that installed the ke_search Faceted Search extension and still run a version before 1.4.1, especially public-facing sites where untrusted users can interact with search or indexed content paths. Prioritize remediation for internet-facing TYPO3 sites still using ke_search before 1.4.1. The issue is old and lacks active exploitation evidence, but XSS can affect user trust, session safety, and site integrity if vulnerable code remains exposed. Mitigation focus: Inventory TYPO3 sites for the ke_search extension and installed version.; Upgrade ke_search to version 1.4.1 or later where still used.; If upgrade status is unclear, follow TYPO3 extension advisory and repository guidance..

Prepared

Jun 14, 2026, 21:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.