-
CVSS Score
-The vulnerability description explicitly mentions XSS in both the extension manager and backend forms. While no exact functions are disclosed, TYPO3's architecture suggests:
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| typo3/cms-backend | composer | >= 4.1.0, < 4.1.14 | 4.1.14 |
| typo3/cms-backend | composer | >= 4.2.0, < 4.2.13 | 4.2.13 |
| typo3/cms-backend | composer | >= 4.3.0, < 4.3.4 | 4.3.4 |
| typo3/cms-backend | composer | >= 4.4.0, < 4.4.1 | 4.4.1 |