The matomo_integration (aka Matomo Integration) extension before 1.3.2 for TYPO3 allows XSS.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
https://typo3.org/security/advisory/typo3-ext-sa-2022-011 | patch vendor advisory |