Skip to content
OpenAdvisories
Medium · 6.1 CVE-2023-26091 EUVD-2023-0771GHSA-q3r2-23r8-wqr9

frp_form_answers allows Cross-site Scripting

Published Feb 26, 2023 · Updated Mar 11, 2025 · Assigned by mitre

Package: frappant/frp-form-answers Ecosystem: Packagist

Description

The frp_form_answers (aka Forms Export) extension before 3.1.2, and 4.x before 4.0.2, for TYPO3 allows XSS via saved emails.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist frappant/frp-form-answers < 3.1.2 3.1.2 GHSA-q3r2-23r8-wqr9
Packagist frappant/frp-form-answers >= 4.0.0, < 4.0.2 4.0.2 GHSA-q3r2-23r8-wqr9

Advisories 1

References