Cross-Site Scripting in Content Preview (CType menu)

🗓️ 23 Mar 2021 01:54:17Reported by GitHub Advisory DatabaseType

github🔗 github.com👁 197 Views

Cross-Site Scripting in Content Preview (CType menu) vulnerability in TYPO

Reporter	Title	Published	Views	Family All 18
Circl	CVE-2021-21370	23 Mar 202106:38	–	circl
CNNVD	TYPO3 跨站脚本漏洞	16 Mar 202100:00	–	cnnvd
CNVD	TYPO3 cross-site scripting vulnerability (CNVD-2021-22140)	23 Mar 202100:00	–	cnvd
CVE	CVE-2021-21370	23 Mar 202101:55	–	cve
Cvelist	CVE-2021-21370 Cross-Site Scripting in Content Preview (CType menu)	23 Mar 202101:55	–	cvelist
EUVD	EUVD-2021-0723	7 Oct 202500:30	–	euvd
Friends Of PHP	TYPO3-CORE-SA-2021-008: Cross-Site Scripting in Content Preview	16 Mar 202108:58	–	friendsofphp
Friends Of PHP	TYPO3-CORE-SA-2021-008: Cross-Site Scripting in Content Preview	16 Mar 202108:58	–	friendsofphp
NCSC	Vulnerabilities fixed in TYPO3	16 Mar 202100:00	–	ncsc
NVD	CVE-2021-21370	23 Mar 202102:15	–	nvd

Vulners

Node

typo3 cms-coreRange9.0.0–9.5.25composer

typo3 cms-coreRange11.0.0–11.1.1composer

typo3 cms-coreRange10.0.0–10.4.14composer

typo3 cms-backendRange11.0.0–11.1.0composer

typo3 cms-backendRange10.0.0–10.4.13composer

typo3 cms-backendRange9.0.0–9.5.24composer

typo3 cms-backendRange8.0.0–8.7.39composer

typo3 cms-backendRange7.0.0–7.6.50composer

Source	Link
github	www.github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-x7hc-x7fm-f7qh
packagist	www.packagist.org/packages/typo3/cms-backend
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-21370
typo3	www.typo3.org/security/advisory/typo3-core-sa-2021-008
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21370.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21370.yaml
github	www.github.com/advisories/GHSA-x7hc-x7fm-f7qh

02 Feb 2024 16:44Current

5.2Medium risk

Vulners AI Score5.2

CVSS 23.5

CVSS 3.15.4

EPSS0.00342