CVE-2013-5323: Cross-site scripting (XSS) vulnerability in the Static Info Tables (static_info_tables) extension before 2....

Security readout for executives and security teams

CVE-2013-5323 is a cross-site scripting issue in the TYPO3 Static Info Tables extension before version 2.3.1. If an exposed site uses a vulnerable version, an attacker could inject browser-executed script or HTML through unspecified inputs. The sources do not provide CVSS scoring or detailed attack conditions. Likely exposure is TYPO3 deployments that installed the static_info_tables extension below 2.3.1, especially public-facing sites. The bundle’s structured affected-product fields are incomplete, so teams should confirm exposure through TYPO3 extension inventory rather than CPE matching alone. Treat this as a moderate web-application hygiene issue unless the vulnerable extension is present on business-critical public TYPO3 sites. The main urgency is confirming whether the old extension exists, because the published record lacks scoring, exploit evidence, and detailed vectors. Mitigation focus: Upgrade static_info_tables to version 2.3.1 or later where the extension is installed.; Review the TYPO3 extension security bulletin for any vendor-specific upgrade or compatibility notes.; Prioritize public TYPO3 sites and administrative workflows using the extension..

Prepared

Jun 14, 2026, 21:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.