Lucene search
GoogleOSV:CVE-2021-32668HistoryJul 20, 2021 - 3:15 p.m.
CVE-2021-32668
2021-07-2015:15:10
Google
osv.dev
6
typo3
cms
cross-site scripting
TYPO3 is an open source PHP based web content management system. Versions 9.0.0 through 9.5.28, 10.0.0 through 10.4.17, and 11.0.0 through 11.3.0 have a cross-site scripting vulnerability. When error messages are not properly encoded, the components QueryGenerator and QueryView are vulnerable to both reflected and persistent cross-site scripting. A valid backend user account having administrator privileges is needed to exploit this vulnerability. TYPO3 versions 9.5.29, 10.4.18, 11.3.1 contain a patch for this issue.
Related
cvelist
cvelist
CVE-2021-32668 Cross-Site Scripting in Query Generator & Query View
2021-07-20 14:45:13
prion
prion
Cross site scripting
2021-07-20 15:15:00
friendsofphp
friendsofphp
typo3
typo3
Cross-Site Scripting in Query Generator & Query View
2021-07-20 00:00:00
github
github
Cross-Site Scripting in Query Generator & Query View
2021-07-22 19:36:58
osv
osv
BIT-typo3-2021-32668
2024-03-06 11:10:40
Cross-Site Scripting in Query Generator & Query View
2021-07-22 19:36:58
cve
cve
CVE-2021-32668
2021-07-20 15:15:10
nvd
nvd
CVE-2021-32668
2021-07-20 15:15:10
cnvd
cnvd
TYPO3 Cross-Site Scripting Vulnerability (CNVD-2022-17986)
2021-07-22 00:00:00
openvas
openvas