Lucene search
TYPO3 AssociationTYPO3-EXT-SA-2021-004HistoryApr 27, 2021 - 12:00 a.m.
Cross-Site Scripting in extension "2 Clicks for External Media" (media2click)
2021-04-2700:00:00
TYPO3 Association
typo3.org
30
0.001 Low
EPSS
Percentile
22.7%
The extension fails to properly encode user input for output in HTML context. A TYPO3 backend user account is required to exploit the vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| media2click | ge | 1.0.0 | |
| media2click | le | 1.3.2 |
Related
nvd
nvd
CVE-2021-31778
2021-04-28 07:15:07
github
github
Cross-site scripting in media2click
2021-06-08 20:11:52
prion
prion
Cross site scripting
2021-04-28 07:15:00
osv
osv
Cross-site scripting in media2click
2021-06-08 20:11:52
CVE-2021-31778
2021-04-28 07:15:07
cvelist
cvelist
CVE-2021-31778
2021-04-28 06:19:09
gitlab
gitlab
cve
cve
CVE-2021-31778
2021-04-28 07:15:07