Lucene search

K
typo3TYPO3 AssociationTYPO3-CORE-SA-2021-009
HistoryJul 20, 2021 - 12:00 a.m.

Cross-Site Scripting in Page Preview

2021-07-2000:00:00
TYPO3 Association
typo3.org
11

0.001 Low

EPSS

Percentile

21.2%

Failing to properly encode Page TSconfig settings, the corresponding page preview module (Web>View) is vulnerable to persistent cross-site scripting. A valid backend user account is needed to exploit this vulnerability.

0.001 Low

EPSS

Percentile

21.2%