GHSA-rmc9-5546-5rrfLow

Commerce extension for TYPO3 vulnerable to Cross-site Scripting

Published
May 2, 2022
Last Modified
April 12, 2025

🔗 CVE IDs covered (1)

CVE-2009-4963 →

📋 Description

Cross-site scripting (XSS) vulnerability in the Commerce extension before 0.9.9 for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

🎯 Affected products1

  • composer/commerceteam/commerce:>= 0.9.6, < 0.9.9

🔗 References (4)