Cross-site Scripting in the yoast_seo TYPO3 extension

MEDIO 5.4CVE-2021-36788 · GHSA-28w5-j8xj-2xwc · Published 13/08/2021 · updated 17/06/2026

En resumen

CVE-2021-36788 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a yoast-seo-for-typo3/yoast_seo, yoast seo (yoast).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.47%, mayor que el 40.7% de las vulnerabilidades.
Solución: actualizar a 7.2.3 o posterior.

Package	Affected versions	Patched versions
yoast-seo-for-typo3/yoast_seo Packagist	`< 7.2.3`	`7.2.3`
yoast seo yoast	`< 7.2.3`	`7.2.3`

The extension fails to properly encode user input for output in HTML context. A TYPO3 backend user account is required to exploit the vulnerability.

NVD description

The yoast_seo (aka Yoast SEO) extension before 7.2.3 for TYPO3 allows XSS.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.