EUVD-2021-2048

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Femanager extension for TYPO3 allows XSS via crafted SVG document before versions 5.5.1 and 6.3.1

Reporter	Title	Published	Views	Family All 14
0day.today	TYPO3 femanager 6.3.0 Cross Site Scripting Vulnerability	25 Jan 202200:00	–	zdt
Circl	CVE-2021-36787	13 Aug 202120:41	–	circl
CNNVD	TYPO3 跨站脚本漏洞	10 Aug 202100:00	–	cnnvd
CNVD	TYPO3 Cross-Site Scripting Vulnerability (CNVD-2022-17974)	16 Aug 202100:00	–	cnvd
CVE	CVE-2021-36787	13 Aug 202116:15	–	cve
Cvelist	CVE-2021-36787	13 Aug 202116:15	–	cvelist
Github Security Blog	Cross-site Scripting in the femanager TYPO3 extension	1 Sep 202118:36	–	github
NVD	CVE-2021-36787	13 Aug 202117:15	–	nvd
OSV	GHSA-F3RF-V9QM-9C89 Cross-site Scripting in the femanager TYPO3 extension	1 Sep 202118:36	–	osv
Packet Storm	TYPO3 femanager 6.3.0 Cross Site Scripting	25 Jan 202200:00	–	packetstorm

[
  {
    "enisaIdVendor": [
      {
        "id": "6f508ac0-98e0-31fa-96a0-2657f91b5b47",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "6040810d-c707-3504-8512-bddc1fa3aa52",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-36787
github	www.github.com/in2code-de/femanager/commit/70f873c60f0e40ffd6a1300218ca368156fc1bf2
extensions	www.extensions.typo3.org/extension/femanager
github	www.github.com/in2code-de/femanager
github	www.github.com/in2code-de/femanager/releases/tag/6.3.1
typo3	www.typo3.org/help/security-advisories/security
typo3	www.typo3.org/security/advisory/typo3-ext-sa-2021-010
packetstormsecurity	www.packetstormsecurity.com/files/165675/TYPO3-femanager-6.3.0-Cross-Site-Scripting.html
seclists	www.seclists.org/fulldisclosure/2022/Jan/53
packetstormsecurity	www.packetstormsecurity.com/files/cve/CVE-2021-36787

07 Oct 2025 00:30Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.15.4

CVSS 23.5

EPSS0.00691