Medium · 5.4 CVE-2020-15514 EUVD-2022-1892GHSA-23fm-v895-3qxq

jh_captcha for Typo3 XSS Vulnerability

Published Jul 7, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

The jh_captcha extension through 2.1.3, and 3.x through 3.0.2, for TYPO3 allows XSS.

Ecosystem	Package	Affected	Fixed	Record
Packagist	haffner/jh_captcha	>= 3.0.0, < 3.0.3	3.0.3	GHSA-23fm-v895-3qxq
Packagist	haffner/jh_captcha	< 2.1.4	2.1.4	GHSA-23fm-v895-3qxq