Skip to content
OpenAdvisories

Package · Packagist

typo3fluid/fluid

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.0
    CVE-2020-26216

    Cross-Site Scripting in TYPO3 Fluid

    TYPO3 Fluid before versions 2.0.8, 2.1.7, 2.2.4, 2.3.7, 2.4.4, 2.5.11 and 2.6.10 is vulnerable to Cross-Site Scripting. Three XSS vulnerabilities have been detected in Fluid: 1. TagBasedViewHelper allowed XSS through maliciously crafted additionalAttributes a…

    TYPO3 Fluid typo3fluid/fluid Packagist
  • Medium 4.7
    CVE-2020-15241

    Cross-Site Scripting in TYPO3 Fluid Engine

    TYPO3 Fluid Engine (package `typo3fluid/fluid`) before versions 2.0.5, 2.1.4, 2.2.1, 2.3.5, 2.4.1, 2.5.5 or 2.6.1 is vulnerable to cross-site scripting when making use of the ternary conditional operator in templates like `{showFullName ? fullName : defaultVa…

    TYPO3 Fluid typo3/cms typo3/cms-core Packagist