Description
The fluid_components (aka Fluid Components) extension before 3.5.0 for TYPO3 allows XSS via a component argument parameter, for certain {content} use cases that may be edge cases.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | sitegeist/fluid-components | < 3.5.0 | 3.5.0 | GHSA-8648-h559-8h42 |
Advisories 1
- WID-SEC-2023-0718 TYPO3 Extension "Fluid Components": Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · Mar 22, 2023