CVE-2021-28380 · Vexday

CVE-2021-28380

EPSS 0.5%

The aimeos (aka Aimeos shop and e-commerce framework) extension before 19.10.12 and 20.x before 20.10.5 for TYPO3 allows XSS via a backend user account.

Produtos afetados

n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://typo3.org/security/advisory/typo3-ext-sa-2021-003