Description
Cross-site scripting (XSS) vulnerability in the typoLink function in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote authenticated editors to inject arbitrary web script or HTML via a link field.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | typo3/cms | >= 6.2.0, < 6.2.16 | 6.2.16 | GHSA-j5v7-9xr5-m7gx |
| Packagist | typo3/cms | >= 7.0.0, < 7.6.1 | 7.6.1 | GHSA-j5v7-9xr5-m7gx |