CVE-2021-36790

The CVE-2021-36790 entry affects the TYPO3 dated_news extension (up to version 5.1.1). The vulnerability is a Cross-Site Scripting (XSS) flaw caused by improper encoding of user input for HTML output, enabling injection of malicious scripts. Severity is reflected as MEDIUM (CVSS v2: 4.3; CVSS v3....