frp_form_answers allows Cross-site Scripting

MOYENNE 6.1CVE-2023-26091 · GHSA-q3r2-23r8-wqr9 · Published 26/02/2023 · updated 17/06/2026

En bref

CVE-2023-26091 est une vulnérabilité MOYENNE (CVSS 6.1) touchant frappant/frp-form-answers, forms export (frappant).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.42%, plus élevée que 36.9% des vulnérabilités.
Correctif : mettre à jour vers 4.0.2, 3.1.2 ou plus récent.

Package	Affected versions	Patched versions
frappant/frp-form-answers Packagist	`≥ 4.0.0, < 4.0.2< 3.1.2`	`4.0.23.1.2`
forms export frappant	`≥ 4.0.0, < 4.0.2< 3.1.2`	`4.0.23.1.2`

The frp_form_answers (aka Forms Export) extension before 3.1.2, and 4.x before 4.0.2, for TYPO3 allows XSS via saved emails.

NVD description

The frp_form_answers (aka Forms Export) extension before 3.1.2, and 4.x before 4.0.2, for TYPO3 allows XSS via saved emails.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.