Lucene search

K
osvGoogleOSV:GHSA-GVXV-P9RV-GMCG
HistoryJun 17, 2022 - 9:46 p.m.

brotkrueml/typo3-matomo-integration vulnerable to Cross-Site Scripting

2022-06-1721:46:28
Google
osv.dev
14

0.001 Low

EPSS

Percentile

31.5%

The extension fails to properly encode user input for output in HTML context. A TYPO3 backend user account is required to exploit the vulnerability.

0.001 Low

EPSS

Percentile

31.5%