| Package | Affected versions | Patched versions |
|---|---|---|
| typo3/cms-core | ≥ 9.2.0, < 9.5.4 | 9.5.4 |
Failing to properly encode information from external sources, language pack handling in the install tool is vulnerable to cross-site scripting.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free