Lucene search

K
typo3TYPO3 AssociationTYPO3-EXT-SA-2022-002
HistoryFeb 15, 2022 - 12:00 a.m.

Cross-Site Scripting in extension "Bookdatabase" (extbookdatabase)

2022-02-1500:00:00
TYPO3 Association
typo3.org
45
cross-site scripting
bookdatabase
datatables
vulnerable
software

EPSS

0.002

Percentile

61.3%

The extension bundles a vulnerable version of the 3rd party JavaScript component “Datatables” which was known to be vulnerable against Cross-Site Scripting.