Skip to content
OpenAdvisories

Package · Packagist

typo3/cms-fluid

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.1
    GHSA-22q7-cg4r-p9mx

    TYPO3 Cross-Site Scripting in Fluid ViewHelpers

    Failing to properly encode user input, templates using built-in Fluid ViewHelpers are vulnerable to cross-site scripting.

    typo3/cms-fluid Packagist
  • Medium 6.1
    CVE-2010-3672

    TYPO3 vulnerable to Cross-Site Scripting in the textarea view helper

    TYPO3 before 4.3.4 and 4.4.x before 4.4.1 allows XSS in the textarea view helper in an extbase extension.

    typo3/cms-fluid Packagist