Description
The aimeos (aka Aimeos shop and e-commerce framework) extension before 19.10.12 and 20.x before 20.10.5 for TYPO3 allows XSS via a backend user account.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | aimeos/aimeos-typo3 | < 19.10.12 | 19.10.12 | GHSA-73wv-rgj7-vjj9 |
| Packagist | aimeos/aimeos-typo3 | >= 20.0.0, < 20.10.5 | 20.10.5 | GHSA-73wv-rgj7-vjj9 |