CVE-2020-11065

CVE-2020-11065 affects TYPO3 CMS: link tags generated by the typolink feature are vulnerable to cross‑site scripting when properties are assigned as HTML attributes. Affected ranges are TYPO3 9.5.12–9.5.16 and 10.2.0–10.4.1; fixed in 9.5.17 and 10.4.2. The issue arises from improper parsing/valid...