CWE-79

CVE-2021-36785

February 23, 2023 by

The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows XSS.

CVE-2021-36787

February 23, 2023 by

The femanager extension before 5.5.1 and 6.x before 6.3.1 for TYPO3 allows XSS via a crafted SVG document.

CVE-2021-36788

February 23, 2023 by

The yoast_seo (aka Yoast SEO) extension before 7.2.3 for TYPO3 allows XSS.

CVE-2021-36790

February 23, 2023 by

The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows XSS.

Akaunting version 2.1.12 and earlier suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in processing user-supplied avatar images. This issue was fixed in version 2.1.13 of the product.

CVE-2021-36805

February 23, 2023 by

Akaunting version 2.1.12 and earlier suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in the sales invoice processing component of the application. This issue was fixed in version 2.1.13 of the product.