| Package | Affected versions | Patched versions |
|---|---|---|
| typo3/cms | ≥ 6.2.0, < 6.2.19 | 6.2.19 |
| typo3 | = 6.2= 6.2.0= 6.2.1= 6.2.10= 6.2.11= 6.2.12= 6.2.13= 6.2.14= 6.2.15= 6.2.16= 6.2.17= 6.2.18= 6.2.2= 6.2.3= 6.2.4= 6.2.5= 6.2.6= 6.2.7= 6.2.8= 6.2.9 |
Cross-site scripting (XSS) vulnerability in the Backend component in TYPO3 6.2.x before 6.2.19 allows remote attackers to inject arbitrary web script or HTML via the module parameter when creating a bookmark.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free