Lucene search
TYPO3 AssociationTYPO3-EXT-SA-2021-007HistoryApr 27, 2021 - 12:00 a.m.
Cross-Site Scripting in extension "Bootstrap Package" (bootstrap_package)
2021-04-2700:00:00
TYPO3 Association
typo3.org
38
cross-site scripting
bootstrap package
html context
user input
vulnerability
software
EPSS
0.001
Percentile
26.9%
The extension fails to properly encode user input for output in HTML context. The following templates are affected by the vulnerability:
Related
prion
prion
Cross site scripting
2021-04-27 20:15:00
cve
cve
CVE-2021-21365
2021-04-27 20:15:08
nvd
nvd
CVE-2021-21365
2021-04-27 20:15:08
osv
osv
CVE-2021-21365
2021-04-27 20:15:08
Cross-Site Scripting in Bootstrap Package
2021-04-29 21:51:21
BIT-typo3-2021-21365
2024-03-06 11:10:55
github
github
Cross-Site Scripting in Bootstrap Package
2021-04-29 21:51:21
veracode
veracode
Cross-Site Scripting (XSS)
2021-04-30 05:14:09
cvelist
cvelist
CVE-2021-21365 Cross-Site Scripting in Content Rendering
2021-04-27 19:30:17