PT-2024-40007 · Packagist · Typo3/Cms

Published

2024-06-05

·

Updated

2024-06-05

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned.
Description The issue arises from the language pack handling in the install tool failing to properly encode information from external sources, making it vulnerable to cross-site scripting.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

GHSA-259V-XM34-P7FR

Affected Products

Typo3/Cms