| Package | Affected versions | Patched versions |
|---|---|---|
| typo3/cms | ≥ 8.0.0, < 8.7.5 | 8.7.5 |
Failing to properly encode user input, backend forms are vulnerable to Cross-Site Scripting. A valid backend user account is needed to exploit this vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free