Lucene search

K
typo3TYPO3 AssociationTYPO3-PSA-2019-003
HistoryJan 22, 2019 - 12:00 a.m.

Cross-Site Scripting in Flash component (ELTS)

2019-01-2200:00:00
TYPO3 Association
typo3.org
5

0.002 Low

EPSS

Percentile

57.8%

It has been discovered, that the third party component websvg is vulnerable to cross-site scripting. A browser with Flash plugin installed is needed in order to exploit this vulnerability.

CPENameOperatorVersion
eltseq6.2.0
eltseq6.2.38
eltseq7.0.0
eltseq7.1.0

0.002 Low

EPSS

Percentile

57.8%