Lucene search
Veracode Vulnerability DatabaseVERACODE:27915HistoryNov 18, 2020 - 2:39 a.m.
Cross-site Scripting (XSS)
2020-11-1802:39:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
typo3
fluid
vulnerability
cross-site scripting
xss
viewhelpers
abstractconditionviewhelper
software
EPSS
0.001
Percentile
50.1%
typo3/fluid is vulnerable to cross-site scripting (XSS). An attacker is able to inject and execute malicious script in a user’s browser via 1) additionalAttributes arrays 2) ViewHelpers 3) Subclasses of AbstractConditionViewHelper.
Related
osv
osv
CVE-2020-26216
2020-11-17 21:15:12
Cross-Site Scripting through Fluid view helper arguments
2020-11-18 21:06:07
friendsofphp
friendsofphp
Cross-Site Scripting through Fluid view helper arguments
2020-11-16 21:38:14
nvd
nvd
CVE-2020-26216
2020-11-17 21:15:12
cvelist
cvelist
CVE-2020-26216 Cross-Site Scripting in TYPO3 Fluid
2020-11-17 20:45:20
github
github
Cross-Site Scripting through Fluid view helper arguments
2020-11-18 21:06:07
typo3
typo3
Cross-Site Scripting through Fluid view helper arguments
2020-11-17 00:00:00
cve
cve
CVE-2020-26216
2020-11-17 21:15:12
prion
prion
Cross site scripting
2020-11-17 21:15:00
openvas
openvas