CVE-2021-21340 Cross-Site Scripting in Content Preview

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 10.4.14, 11.1.1 it has been discovered that database fields used as descriptionColumn are vulnerable to cross-site scripting when their content gets previewed. A valid backend user account is needed to explo...

CVE-2021-21340

TYPO3 core vulnerability CVE-2021-21340: In TYPO3 versions earlier than 10.4.14 and 11.1.1, database fields used as descriptionColumn could be exploited for cross-site scripting when content is previewed. A valid backend user is required to exploit. The issue is fixed in TYPO3 10.4.14 and 11.1.1....