Lucene search

K
typo3TYPO3 AssociationTYPO3-EXT-SA-2021-012
HistoryAug 10, 2021 - 12:00 a.m.

Cross Site Scripting in Extension "Yoast SEO for TYPO3" (yoast_seo)

2021-08-1000:00:00
TYPO3 Association
typo3.org
30

0.001 Low

EPSS

Percentile

22.7%

The extension fails to properly encode user input for output in HTML context. A TYPO3 backend user account is required to exploit the vulnerability.

CPENameOperatorVersion
yoast_seole7.2.2

0.001 Low

EPSS

Percentile

22.7%

Related for TYPO3-EXT-SA-2021-012