~ / search / GHSA-4vr9-33fv-mg6r

GHSA-4vr9-33fv-mg6r

Cross site scripting in ameos_tarteaucitron

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-33155

Packages

EcosystemPackageAffectedFixed in
Packagist ameos/ameos_tarteaucitron < 1.2.23 1.2.23

Details

As written in the advisory (Markdown source, shown as plain text).

The ameos_tarteaucitron (aka AMEOS - TarteAuCitron GDPR cookie banner and tracking management / French RGPD compatible) extension before 1.2.23 for TYPO3 allows XSS.

References

External links from the advisory. They lead to third-party sites.