UpHeron
All vulnerabilities

Servers and applications

CVE-2021-21365

Bootstrap Package is a theme for TYPO3. It has been discovered that rendering content in the website frontend is vulnerable to cross-site scripting. A valid backend user account is needed to exploit this vulnerability. Users of the extension, who have overwritten the affected templates with custom code must manually apply the security fix. Update to version 7.1.2, 8.0.8, 9.1.4, 10.0.10 or 11.0.3…

Severity
Medium 5.4
Published
27 Apr 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
7.1.2, 8.0.8, 9.0.4, 9.1.3, 10.0.10, 11.0.3
Sources
NVD

Affected software

SoftwareAffected versions
TYPO3Servers and applications · cpe:a:typo3:typo3
  • Every version before 7.1.2
  • From 8.0.0 before 8.0.8
  • From 9.0.0 before 9.0.4
  • From 9.1.0 before 9.1.3
  • From 10.0.0 before 10.0.10
  • From 11.0.0 before 11.0.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-21365
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-21365