TYPO3 Cross-Site Scripting Vulnerability (CNVD-2022-17986)

TYPO3 is a free and open source content management system (framework) (CMS/CMF) from the Swiss TYPO3 (Typo3) association.TYPO3 suffers from a cross-site scripting vulnerability that stems from the fact that the QueryGenerator and QueryView components are vulnerable to reflected and persistent cross-site scripting attacks when error messages are not properly encoded. No detailed vulnerability details are currently available.