CVE-2021-36787
The femanager extension before 5.5.1 and 6.x before 6.3.1 for TYPO3 allows XSS via a crafted SVG document.
| Software | From | Fixed in |
|---|---|---|
| in2code / femanager | - | 5.5.1 |
| in2code / femanager | 6.0.0 | 6.3.1 |
in2code / femanager
|
- | 5.5.1 |
|
in2code / femanager
|
6.0.0 | 6.3.1 |
- http://packetstormsecurity.com/files/165675/TYPO3-femanager-6.3.0-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2022/Jan/53
- https://extensions.typo3.org/extension/femanager/
- https://github.com/in2code-de/femanager/commit/70f873c60f0e40ffd6a1300218ca368156fc1bf2
- https://github.com/in2code-de/femanager/releases/tag/6.3.1
- https://typo3.org/help/security-advisories/security
- https://typo3.org/security/advisory/typo3-ext-sa-2021-010
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime