| Package | Affected versions | Patched versions |
|---|---|---|
| typo | = 1.6= 1.6.8= 2.0.0= 2.0.1= 2.0.5= 2.0.6= 2.5.0= 2.5.1= 2.5.2= 2.5.3= 2.5.4= 2.5.5= 2.5.6= 2.5.7= 2.5.8= 2.6.0= 3.99.0= 3.99.1= 3.99.2= 3.99.3= 3.99.4= 4.0.0= 4.1.1= 5.0.2= 5.0.3= 5.0.3.98= 5.0.3.98.1= 5.1= 5.1.1= 5.1.2≤ 5.1.3 |
Cross-site scripting (XSS) vulnerability in the leave comment (feedback) feature in Typo 5.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) comment[author] (Name) and (2) comment[url] (Website) parameters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free