CVE-2021-21340

See a problem?
Source
https://nvd.nist.gov/vuln/detail/CVE-2021-21340
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-21340.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-21340
Aliases
Published
2021-03-23T02:15:12Z
Modified
2024-06-06T13:24:58.745601Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 10.4.14, 11.1.1 it has been discovered that database fields used as descriptionColumn are vulnerable to cross-site scripting when their content gets previewed. A valid backend user account is needed to exploit this vulnerability. This is fixed in versions 10.4.14, 11.1.1 .

References

Affected packages

Git / github.com/typo3/typo3.cms

Affected ranges

Type
GIT
Repo
https://github.com/typo3/typo3.cms
Events

Affected versions

v11.*

v11.0.0
v11.1.0