medium5.4
CVE-2022-33155
Cross site scripting in ameos_tarteaucitron
Impact
The ameos_tarteaucitron (aka AMEOS - TarteAuCitron GDPR cookie banner and tracking management / French RGPD compatible) extension before 1.2.23 for TYPO3 allows XSS.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | ameos/ameos_tarteaucitron | < 1.2.23 | 1.2.23 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ameos Tarteaucitron Project | Ameos Tarteaucitron | before 1.2.23 |