| Package | Affected versions | Patched versions |
|---|---|---|
| typo3/cms-core | ≥ 8.5.0, < 8.7.23≥ 9.0.0, < 9.5.4 | 8.7.239.5.4 |
Failing to properly encode user input, frontend forms handled by the form framework (system extension “form”) are vulnerable to cross-site scripting.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free