Lucene search

K
osvGoogleOSV:CVE-2020-26227
HistoryNov 23, 2020 - 9:15 p.m.

CVE-2020-26227

2020-11-2321:15:12
Google
osv.dev
1

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.8%

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 9.5.23 and 10.4.10 the system extension Fluid (typo3/cms-fluid) of the TYPO3 core is vulnerable to cross-site scripting passing user-controlled data as argument to Fluid view helpers. Update to TYPO3 versions 9.5.23 or 10.4.10 that fix the problem described.

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.8%