~ / search / GHSA-r8m7-792j-5jvq

GHSA-r8m7-792j-5jvq

TYPO3 Cross-Site Scripting (XSS) vulnerabilities in Content Editing Wizards component

Source: GitHub Advisory Database (reviewed) Low CVE-2013-7074

Packages

EcosystemPackageAffectedFixed in
Packagist typo3/cms >= 4.5.0, < 4.5.32 4.5.32
Packagist typo3/cms >= 4.7.0, < 4.7.17 4.7.17
Packagist typo3/cms >= 6.0.0, < 6.0.12 6.0.12
Packagist typo3/cms >= 6.1.0, < 6.1.7 6.1.7

Details

As written in the advisory (Markdown source, shown as plain text).

Multiple cross-site scripting (XSS) vulnerabilities in Content Editing Wizards in TYPO3 4.5.x before 4.5.32, 4.7.x before 4.7.17, 6.0.x before 6.0.12, 6.1.x before 6.1.7, and the development versions of 6.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters.

References

External links from the advisory. They lead to third-party sites.