CVE-2022-33155

The ameostarteaucitron aka AMEOS - TarteAuCitron GDPR cookie banner and tracking management / French RGPD compatible extension before 1.2.23 for TYPO3 allows XSS...

CVE-2022-33155

Affected software: TYPO3 extension ameos_tarteaucitron (AMEOS - TarteAuCitron) prior to 1.2.23. Vulnerability: cross-site scripting (XSS) due to insufficient encoding, as noted in Veracode discussion of displayParticipantsFormAction. Impact: potential execution of malicious JavaScript in the vict...