Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/typo3/cms-core@8.7.41
purl pkg:composer/typo3/cms-core@8.7.41
Tags Ghost
Next non-vulnerable version 13.4.34
Latest non-vulnerable version 14.3.6
Risk score
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
CVE-2021-32768
Aliases:
GHSA-c5c9-8c6m-727v
Cross-site Scripting TYPO3 is vulnerable to cross-site scripting. Corresponding rendering instructions via TypoScript functionality HTMLparser does not consider all potentially …
10.4.19
Vulnerable
11.3.2
Vulnerable
9.5.29
Vulnerable
Vulnerabilities fixed by this package (3)

Advisory Summary Aliases
GHSA-rgcg-28xm-8mmw
Cross-Site Scripting in Backend Grid View ### Problem Failing to properly encode settings for _backend layouts_, the corresponding grid view … CVE-2021-32669
GHSA-34fr-fhqr-7235
Information Disclosure in User Authentication > ### Meta > * CVSS: `AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C` (4.9) ### Problem It has been discovered that … CVE-2021-32767
GHSA-6mh3-j5r5-2379
Cross-Site Scripting in Query Generator & Query View > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (4.5) ### Problem Failing to … CVE-2021-32668