CVE-2023-28604
1 advisory.
Packagist/sitegeist/fluid-components CVE-2023-28604: medium 6.1
Fluid Components TYPO3 extension vulnerable to Cross-Site Scripting
Action: Upgrade sitegeist/fluid-components to 3.5.0 or later.
composer require sitegeist/fluid-components:3.5.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.5.0 | - |
Fixed versions
| 3.5.0 |
Sources
- osv: GHSA-8648-h559-8h42
- https://nvd.nist.gov/vuln/detail/CVE-2023-28604
- https://github.com/FriendsOfPHP/security-advisories/blob/master/sitegeist/fluid-components/CVE-2023-28604.yaml
- https://github.com/sitegeist/fluid-components
- https://github.com/sitegeist/fluid-components/blob/master/Documentation/XssIssue.md
- https://typo3.org/security/advisory/typo3-ext-sa-2023-003
CVE-2023-28604 · published · modified · JSON