Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-8648-h559-8h42: Fluid Components TYPO3 extension vulnerable to Cross-Site Scripting

All versions of Fluid Components before 3.5.0 were susceptible to Cross-Site Scripting. Version 3.5.0 of the extension fixes this issue. Due to the nature of the problem, some changes in your project’s Fluid templates might be necessary to prevent unwanted double-escaping of HTML markup.

ghsa
#xss#git

Fluid Components TYPO3 extension vulnerable to Cross-Site Scripting

Moderate severity GitHub Reviewed Published Mar 27, 2023 to the GitHub Advisory Database • Updated Mar 27, 2023

ghsa: Latest News

GHSA-g5x8-v2ch-gj2g: Vaultwarden HTML injection vulnerability