CVE-2022-29602

MEDIO 5.4CVE-2022-29602 · Published 12/07/2022 · updated 17/06/2026

In breve

CVE-2022-29602 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda grid elements (grid elements project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.48%, superiore al 42.0% delle vulnerabilità.
Correzione: aggiornare a 10.3.0, 8.8.0, 9.8.0, 7.7.0 o successiva.

Package	Affected versions	Patched versions
grid elements grid_elements_project	`≥ 10.0.0, < 10.3.0≥ 8.0.0, < 8.8.0≥ 9.0.0, < 9.8.0< 7.7.0`	`10.3.08.8.09.8.07.7.0`

Description

The gridelements (aka Grid Elements) extension through 7.6.1, 8.x through 8.7.0, 9.x through 9.7.0, and 10.x through 10.2.0 extension for TYPO3 allows XSS.

References

typo3.org/help/security-advisories · Third Party Advisory
typo3.org/security/advisory/typo3-ext-sa-2022-009 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free