The mm_forum extension through 1.9.5 for TYPO3 allows XSS that can be exploited via CSRF.

Published Jul 7, 2020 · Updated Aug 4, 2024 · Assigned by mitre