Lucene search

K
typo3TYPO3 AssociationTYPO3-CORE-SA-2021-011
HistoryJul 20, 2021 - 12:00 a.m.

Cross-Site Scripting in Backend Grid View

2021-07-2000:00:00
TYPO3 Association
typo3.org
4

0.001 Low

EPSS

Percentile

21.4%

Failing to properly encode settings for backend layouts, the corresponding grid view is vulnerable to persistent cross-site scripting. A valid backend user account is needed to exploit this vulnerability.

0.001 Low

EPSS

Percentile

21.4%