MEDIUM6.5

GHSA-5gr6-97fv-52cc

Cross-Site Scripting in TYPO3 CMS

Quick fix

GHSA-5gr6-97fv-52cc — typo3/cms: upgrade to the fixed version with the command below.

composer require typo3/cms:^7.6.16

Details

Failing to properly encode user input, several places of the TYPO3 CMS are vulnerable to Cross-Site Scripting.

Enter the version of the package you're using.

Introduced in: 7.6.0Fixed in: 7.6.16

Fixcomposer require typo3/cms:^7.6.16

Introduced in: 8.0.0Fixed in: 8.6.1

Fixcomposer require typo3/cms:^8.6.1