Medium · 6.5 GHSA-5gr6-97fv-52cc

Cross-Site Scripting in TYPO3 CMS

Published Jun 5, 2024 · Updated Dec 2, 2024 · Assigned by GHSA

Description

Failing to properly encode user input, several places of the TYPO3 CMS are vulnerable to Cross-Site Scripting.

Ecosystem	Package	Affected	Fixed	Record
Packagist	typo3/cms	>= 7.6.0, < 7.6.16	7.6.16	GHSA-5gr6-97fv-52cc
Packagist	typo3/cms	>= 8.0.0, < 8.6.1	8.6.1	GHSA-5gr6-97fv-52cc