| Package | Affected versions | Patched versions |
|---|---|---|
| typo3/cms-core | ≥ 10.0.0, < 10.2.1≥ 8.0.0, < 8.7.30≥ 9.0.0, < 9.5.12 | 10.2.18.7.309.5.12 |
It has been discovered that the output table listing in the “Files” backend module is vulnerable to cross-site scripting when a file extension contains malicious sequences.
Access to the file system of the server - either directly or through synchronization - is required to exploit the vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free