CVE-2017-5962: An issue was discovered in contexts_wurfl (for TYPO3) before 0.4.2.

Security readout for executives and security teams

CVE-2017-5962 is a cross-site scripting issue in the TYPO3 contexts_wurfl extension before 0.4.2. A vulnerable public page could allow attacker-supplied script to run in a visitor's browser as if it came from the trusted site. Exposure appears limited to TYPO3 sites using the contexts_wurfl extension before version 0.4.2, especially where the referenced check_wurfl.php endpoint is reachable by users or the internet. Prioritize remediation for legacy public TYPO3 sites and any site used by administrators or customers. This is not evidenced as actively exploited in the supplied sources, but exposed XSS can still support credential theft, session abuse, or trust damage. Mitigation focus: Inventory TYPO3 installations for the contexts_wurfl extension and version.; Upgrade contexts_wurfl to 0.4.2 or later where applicable.; Restrict public access to the referenced check_wurfl.php endpoint if not required..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.