CVE-2023-26091
1 advisory.
Packagist/frappant/frp-form-answers CVE-2023-26091: medium 6.1, EPSS 0.42%
frp_form_answers allows Cross-site Scripting
Action: Upgrade frappant/frp-form-answers to 3.1.2 or later.
composer require frappant/frp-form-answers:3.1.2composer require frappant/frp-form-answers:4.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.2 | - |
| 4.0.0 | 4.0.2 | - |
Fixed versions
| 3.1.2 | 4.0.2 |
Sources
- osv: GHSA-q3r2-23r8-wqr9
- https://nvd.nist.gov/vuln/detail/CVE-2023-26091
- https://github.com/frappant/frp_form_answers/commit/39fa16c8c792abdfc33e38bae17847364ff6a71d
- https://github.com/FriendsOfPHP/security-advisories/blob/master/frappant/frp-form-answers/CVE-2023-26091.yaml
- https://github.com/frappant/frp_form_answers
- https://typo3.org/help/security-advisories
- https://typo3.org/security/advisory/typo3-ext-sa-2023-002
CVE-2023-26091 · published · modified · JSON