CVE-2021-21365

🗓️ 27 Apr 2021 20:15:08Reported by [email protected]Type

TYPO3 Bootstrap Package cross-site scripting vulnerability in frontend rendering, requires valid backend user account to exploit. Update to versions 7.1.2, 8.0.8, 9.1.4, 10.0.10, 11.0.3 to fix.

Reporter	Title	Published	Views	Family All 12
CNNVD	Bootstrap 跨站脚本漏洞	27 Apr 202100:00	–	cnnvd
CVE	CVE-2021-21365	27 Apr 202119:30	–	cve
Cvelist	CVE-2021-21365 Cross-Site Scripting in Content Rendering	27 Apr 202119:30	–	cvelist
EUVD	EUVD-2021-0849	7 Oct 202500:30	–	euvd
Github Security Blog	Cross-Site Scripting in Bootstrap Package	29 Apr 202121:51	–	github
OSV	BIT-TYPO3-2021-21365	6 Mar 202411:10	–	osv
OSV	GHSA-P48W-VF3C-RQJX Cross-Site Scripting in Bootstrap Package	29 Apr 202121:51	–	osv
Prion	Cross site scripting	27 Apr 202120:15	–	prion
Positive Technologies	PT-2021-14447 · Typo3 · Bootstrap Package	27 Apr 202100:00	–	ptsecurity
RedhatCVE	CVE-2021-21365	22 May 202519:10	–	redhatcve

NVD

Node

typo3 typo3Range<7.1.2

typo3 typo3Range8.0.0–8.0.8

typo3 typo3Range9.0.0–9.0.4

typo3 typo3Range9.1.0–9.1.3

typo3 typo3Range10.0.0–10.0.10

typo3 typo3Range11.0.0–11.0.3

Source	Link
github	www.github.com/benjaminkott/bootstrap_package/commit/de3a568fc311d6712d9339643e51e8627c80530b
typo3	www.typo3.org/security/advisory/typo3-ext-sa-2021-007
github	www.github.com/benjaminkott/bootstrap_package/security/advisories/GHSA-p48w-vf3c-rqjx

17 Jun 2026 03:35Current

CVSS 23.5

CVSS 3.15.4

EPSS0.00941

CWE-79