GitHub Advisoryadvisory · Packagist
GHSA-cg4m-qjjp-7497 TYPO3 Cross-Site Scripting in link validator component
MEDIUM
Official page ↗
- Ecosystem
- Packagist
- Packages
- typo3/cms
- Severity
- Moderate
- Reviewed
- 2024-06-03
Affected packages
• Packagist typo3/cms: >= 6.2.0, < 6.2.18 → fixed in 6.2.18
• Packagist typo3/cms: >= 7.6.0, < 7.6.3 → fixed in 7.6.3
Description
Failing to sanitize content from editors, the link validator component is susceptible to Cross-Site Scripting. A valid editor account with access to content which is scanned by the link validator component is required to exploit this vulnerability.