Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/typo3fluid/fluid@2.5.2
purl pkg:composer/typo3fluid/fluid@2.5.2
Next non-vulnerable version 2.5.11
Latest non-vulnerable version 2.6.10
Risk score 3.6
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-hpjm-3ww5-6cpf
Aliases:
CVE-2020-26216
Cross-Site Scripting through Fluid view helper arguments > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (5.7) > * CWE-79 ### Problem …
2.5.11
Not vulnerable
GHSA-7733-hjv6-4h47
Aliases:
CVE-2020-15241
Cross-Site Scripting in ternary conditional operator > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C`(5.0) > * CWE-79 --- :information_source:  This vulnerability …
2.5.5
Vulnerable
CVE-2020-26216
Aliases:
GHSA-hpjm-3ww5-6cpf
Cross-site Scripting TYPO3 Fluid is vulnerable to Cross-Site Scripting. Three XSS vulnerabilities have been detected in Fluid - `TagBasedViewHelper` allowed …
2.0.8
Not vulnerable
2.1.7
Not vulnerable
2.2.4
Not vulnerable
2.3.7
Not vulnerable
2.4.4
Not vulnerable
2.5.11
Not vulnerable
2.6.10
Not vulnerable
This package is not known to fix any advisories.