| Package | Affected versions | Patched versions |
|---|---|---|
| tpwd/ke_search | ≥ 4.1.0, < 4.6.6≥ 5.0.0, < 5.0.2< 4.0.3 | 4.6.65.0.24.0.3 |
| faceted search | ≥ 4.1.0, < 4.6.6≥ 5.0.0, < 5.0.2< 4.0.3 | 4.6.65.0.24.0.3 |
The ke_search (aka Faceted Search) extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via indexed data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free