Packagist/typo3/cms: medium
Cross-Site Scripting (XSS) in TYPO3 Backend
Action: Upgrade typo3/cms to 6.2.27 or later.
composer require typo3/cms:6.2.27composer require typo3/cms:7.6.11composer require typo3/cms:8.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.2.0 | 6.2.27 | - |
| 7.6.0 | 7.6.11 | - |
| 8.0.0 | 8.3.1 | - |
Fixed versions
| 6.2.27 | 7.6.11 | 8.3.1 |
Sources
- osv: GHSA-hq37-rfjc-mr8h
- https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2016-09-14-1.yaml
- https://github.com/TYPO3/typo3
- https://typo3.org/security/advisory/typo3-core-sa-2016-021
published · modified · JSON