Design/Logic Flaw

The fluidcomponents aka Fluid Components extension before 3.5.0 for TYPO3 allows XSS via a component argument parameter, for certain content use cases that may be edge cases...

CVE-2023-28604

The CVE-2023-28604 entry impacts the fluid_components (Fluid Components) extension for TYPO3 prior to version 3.5.0. A cross-site scripting (XSS) vulnerability exists via a component argument parameter in certain {content} use cases. The issue is clearly tied to the extension before 3.5.0, with c...

CVE-2023-28604

The fluidcomponents aka Fluid Components extension before 3.5.0 for TYPO3 allows XSS via a component argument parameter, for certain content use cases that may be edge cases...

CVE-2023-28604

The fluidcomponents aka Fluid Components extension before 3.5.0 for TYPO3 allows XSS via a component argument parameter, for certain content use cases that may be edge cases...