Lucene search
TYPO3 AssociationTYPO3-CORE-SA-2021-007HistoryMar 16, 2021 - 12:00 a.m.
Cross-Site Scripting in Content Preview
2021-03-1600:00:00
TYPO3 Association
typo3.org
34
0.001 Low
EPSS
Percentile
26.4%
It has been discovered that database fields used as descriptionColumn are vulnerable to cross-site scripting when their content gets previewed in the page module. A valid backend user account is needed to exploit this vulnerability.
Related
osv
osv
CVE-2021-21340
2021-03-23 02:15:12
Cross-Site Scripting in Content Preview
2021-03-23 01:53:47
BIT-typo3-2021-21340
2024-03-06 11:11:15
friendsofphp
friendsofphp
TYPO3-CORE-SA-2021-007: Cross-Site Scripting in Content Preview
2021-03-16 09:01:14
TYPO3-CORE-SA-2021-007: Cross-Site Scripting in Content Preview
2021-03-16 09:01:14
veracode
veracode
Cross-site Scripting (XSS)
2021-03-24 06:15:48
openvas
openvas
TYPO3 XSS Vulnerability (TYPO3-CORE-SA-2021-007)
2021-03-30 00:00:00
nvd
nvd
CVE-2021-21340
2021-03-23 02:15:12
prion
prion
Cross site scripting
2021-03-23 02:15:00
cvelist
cvelist
CVE-2021-21340 Cross-Site Scripting in Content Preview
2021-03-23 01:50:34
github
github
Cross-Site Scripting in Content Preview
2021-03-23 01:53:47
cve
cve
CVE-2021-21340
2021-03-23 02:15:12