Lucene search

K
typo3TYPO3 AssociationTYPO3-CORE-SA-2020-003
HistoryMay 12, 2020 - 12:00 a.m.

Cross-Site Scripting in Link Handling

2020-05-1200:00:00
TYPO3 Association
typo3.org
11

0.001 Low

EPSS

Percentile

21.4%

It has been discovered that link tags generated by typolink functionality are vulnerable to cross-site scripting - properties being assigned as HTML attributes have not been parsed correctly.

0.001 Low

EPSS

Percentile

21.4%