CVE-2021-28380

The CVE applies to the TYPO3 Aimeos shop and e‑commerce extension. Vulnerable versions are the Aimeos TYPO3 extension before 19.10.12 and 20.x before 20.10.5, where an attacker could exploit via a backend user account to perform Cross-site Scripting (XSS). Remediation: upgrade to 19.10.12 or 20.1...