Medium · 6.1 CVE-2019-12748 EUVD-2022-5113GHSA-r6fv-56gp-j3r4

Typo3 Cross-Site Scripting in Link Handling

Published Jul 9, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

TYPO3 8.3.0 through 8.7.26 and 9.0.0 through 9.5.7 allows XSS.

Ecosystem	Package	Affected	Fixed	Record
Packagist	typo3/cms	>= 8.0.0, < 8.7.27	8.7.27	GHSA-r6fv-56gp-j3r4
Packagist	typo3/cms	>= 9.0.0, < 9.5.8	9.5.8	GHSA-r6fv-56gp-j3r4
Packagist	typo3/cms-core	>= 8.0.0, < 8.7.27	8.7.27	GHSA-r6fv-56gp-j3r4
Packagist	typo3/cms-core	>= 9.0.0, < 9.5.8	9.5.8	GHSA-r6fv-56gp-j3r4