CVE-2020-26216

TYPO3 Fluid (typo3fluid/fluid) contains multiple XSS flaws in older Fluid versions (2.0.8, 2.1.7, 2.2.4, 2.3.7, 2.4.4, 2.5.11, 2.6.10). The CVE-2020-26216 entry documents three issues: (1) TagBasedViewHelper accepted malicious additionalAttributes keys that could craft HTML when unescaped; (2) Co...