CVE-2022-33155: XSS
Published Jul 12, 2022
·Updated
The ameostarteaucitron (aka AMEOS - TarteAuCitron GDPR cookie banner and tracking management / French RGPD compatible) extension before 1.2.23 for TYPO3 allows XSS.
Affected Software
2 affected componentsFixes available
composer/ameos/ameos_tarteaucitron<1.2.23
1.2.23
Ameos Tarteaucitron Project Ameos Tarteaucitron Typo3<1.2.23
Remediation
Patch Available
Event History
Jul 12, 2022
CVE Published
via MITRE·09:59 PM
Data Sourced
via MITRE·09:59 PM
Description
Jul 13, 2022
Advisory Published
via GitHub·12:00 AM
Frequently Asked Questions
1
What is the severity of CVE-2022-33155?
CVE-2022-33155 is classified as a cross-site scripting (XSS) vulnerability affecting the Ameos TarteAuCitron extension.
2
How do I fix CVE-2022-33155?
To fix CVE-2022-33155, upgrade the Ameos TarteAuCitron extension to version 1.2.23 or later.
3
What software is affected by CVE-2022-33155?
CVE-2022-33155 affects the Ameos TarteAuCitron extension for TYPO3 prior to version 1.2.23.
4
What is CVE-2022-33155?
CVE-2022-33155 is a vulnerability in the Ameos TarteAuCitron extension that allows for cross-site scripting attacks.
5
Is CVE-2022-33155 critical for my website?
If your website is using an affected version of the Ameos TarteAuCitron extension, it is critical to apply the patch to prevent potential XSS attacks.