TYPO3 Multiple Vulnerabilities (TYPO3-CORE-SA-2020-009, TYPO3-CORE-SA-2020-010, TYPO3-CORE-SA-2020-011)

TYPO3 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3"; if description...

CVE-2020-26227

TYPO3 core Fluid system extension (typo3/cms-fluid) is vulnerable to cross-site scripting when user-controlled data is passed as an argument to Fluid view helpers. Affected versions are TYPO3 before 9.5.23 and 10.4.10. Root cause described in multiple sources is improper handling of user input in...