Cross-Site Scripting (XSS)

typo3fluid/fluid is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript in a user's browser via conditional operator in templates such as showFullName ? fullName : defaultValue...

PT-2020-14306 · Typo3 · Typo3Fluid/Fluid

Name of the Vulnerable Software and Affected Versions: typo3fluid/fluid versions prior to 2.0.5 typo3fluid/fluid versions prior to 2.1.4 typo3fluid/fluid versions prior to 2.2.1 typo3fluid/fluid versions prior to 2.3.5 typo3fluid/fluid versions prior to 2.4.1 typo3fluid/fluid versions prior to...