Cross-Site Scripting Vulnerability in Yoast SEO Extension for TYPO3
CVE-2021-36788

5.4MEDIUM

Key Information:

Vendor

Yoast

Status
Yoast Seo
Vendor
CVE Published:
13 August 2021

What is CVE-2021-36788?

A Cross-Site Scripting (XSS) vulnerability exists in the Yoast SEO extension for TYPO3 prior to version 7.2.3. This flaw allows attackers to inject malicious scripts into web pages viewed by other users, potentially compromising user data and session information. It is essential for TYPO3 users to upgrade to the latest version to avoid exploitation of this vulnerability. For more information, visit the TYPO3 security advisory.

References

https://typo3.org/help/security-advisories/security
x_refsource_MISC
https://typo3.org/security/advisory/typo3-ext-sa-2021-013
x_refsource_CONFIRM

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.