Headline
GHSA-gvxv-p9rv-gmcg: Cross-Site Scripting
The extension fails to properly encode user input for output in HTML context. A TYPO3 backend user account is required to exploit the vulnerability.
Cross-Site Scripting
Moderate severity GitHub Reviewed Published Jun 17, 2022 • Updated Jun 17, 2022