Skip to content
OpenAdvisories

Package · Packagist

typo3fluid/fluid

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.0
    CVE-2020-26216

    Cross-Site Scripting in TYPO3 Fluid

    TYPO3 Fluid before versions 2.0.8, 2.1.7, 2.2.4, 2.3.7, 2.4.4, 2.5.11 and 2.6.10 is vulnerable to Cross-Site Scripting. Three XSS vulnerabilities have been detected in Fluid: 1. TagBasedViewHelper allowed XSS through maliciously crafted additionalAttributes a…

    TYPO3 Fluid typo3fluid/fluid Packagist