VYPR

Fluid

by TYPO3

CVEs (1)

  • CVE-2020-26216HigNov 17, 2020
    risk 0.45cvss 8.0epss 0.01

    TYPO3 Fluid before versions 2.0.8, 2.1.7, 2.2.4, 2.3.7, 2.4.4, 2.5.11 and 2.6.10 is vulnerable to Cross-Site Scripting. Three XSS vulnerabilities have been detected in Fluid: 1. TagBasedViewHelper allowed XSS through maliciously crafted additionalAttributes arrays by creating…