CVE-2020-8091

CVE-2020-8091 affects TYPO3 components where an embedded external Flash file, svg.swf, within the TYPO3 contrib/websvg directory is vulnerable to cross-site scripting. Specifically, TYPO3 6.2.0–6.2.38 ELTS and 7.0.0–7.1.0 include a third‑party SVG Web component that serves svg.swf and can be expl...