Description
Cross-site scripting (XSS) vulnerability in the Commerce extension before 0.9.9 for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | commerceteam/commerce | >= 0.9.6, < 0.9.9 | 0.9.9 | GHSA-rmc9-5546-5rrf |
References
- ADV-2009-2409 vdb-entry
- 36133 vdb-entry
- http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-011/