EPSS
Percentile
22.7%
The aimeos (aka Aimeos shop and e-commerce framework) extension before 19.10.12 and 20.x before 20.10.5 for TYPO3 allows Cross-site Scripting (XSS) via a backend user account.
nvd.nist.gov/vuln/detail/CVE-2021-28380
typo3.org/security/advisory/typo3-ext-sa-2021-003