All vulnerabilities

Servers and applications

CVE-2022-36020

By-passing Cross-Site Scripting Protection in HTML Sanitizer

Severity
Medium 6.1
Published
13 Sept 2022
Last changed
13 Sept 2022
Added to UpHeron
3 Nov 2026
Fixed in
11.5.16
Also known as
GHSA-gqqf-g5r7-84vf
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
TYPO3Servers and applications · github:typo3/typo3
  • From 11.0.0 before 11.5.16

References