medium6.1
CVE-2022-33157
libconnect Extension for Typo3 Vulnerable to XSS
Impact
The libconnect extension before 7.0.8 and 8.x before 8.1.0 for TYPO3 allows XSS.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | subhh/libconnect | < 7.0.8 | 7.0.8 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libconnect Project | Libconnect | before 7.0.8 from 8.0.0 before 8.1.0 |