CVE-2021-32668

TYPO3 is an open source PHP based web content management system. Versions 9.0.0 through 9.5.28, 10.0.0 through 10.4.17, and 11.0.0 through 11.3.0 have a cross-site scripting vulnerability. When error messages are not properly encoded, the components QueryGenerator and QueryView are vulnerable to...

TYPO3 Multiple XSS Vulnerabilities (TYPO3-CORE-SA-2021-010, TYPO3-CORE-SA-2021-011)

TYPO3 is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3"...

CVE-2021-32668 Cross-Site Scripting in Query Generator & Query View

TYPO3 is an open source PHP based web content management system. Versions 9.0.0 through 9.5.28, 10.0.0 through 10.4.17, and 11.0.0 through 11.3.0 have a cross-site scripting vulnerability. When error messages are not properly encoded, the components QueryGenerator and QueryView are vulnerable to...

CVE-2021-32668

TYPO3-CORE-SA-2021-010/CVE-2021-32668 affects TYPO3 CMS versions 9.0.0–9.5.28, 10.0.0–10.4.17, and 11.0.0–11.3.0. The vulnerability is a cross-site scripting (XSS) flaw in the QueryGenerator and QueryView components that occurs when error messages are not properly encoded, enabling reflected and ...