GHSA-cg45-qgcf-hf9xMediumCVSS 5.4

TYPO3 is vulnerable to Cross-Site Scripting (XSS) on the backend

Published
April 21, 2022
Last Modified
February 6, 2024

🔗 CVE IDs covered (1)

CVE-2010-3660 →

📋 Description

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS on the backend.

🎯 Affected products4

  • composer/typo3/cms-backend:< 4.1.14
  • composer/typo3/cms-backend:>= 4.2.0, < 4.2.13
  • composer/typo3/cms-backend:>= 4.3.0, < 4.3.4
  • composer/typo3/cms-backend:>= 4.4.0, < 4.4.1

🔗 References (5)