Skip to content
OpenAdvisories

Vendor

TYPO3GmbH

1 known vulnerabilities.

Products

svg_sanitizer 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2020-11070

    Cross-Site Scripting in SVG Sanitizer

    The SVG Sanitizer extension for TYPO3 has a cross-site scripting vulnerability in versions before 1.0.3. Slightly invalid or incomplete SVG markup is not correctly processed and thus not sanitized at all. Albeit the markup is not valid it still is evaluated i…

    TYPO3GmbH svg_sanitizer t3g/svg-sanitizer Packagist