Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The ke_search (aka Faceted Search) extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via indexed data.
Advisories for Composer/Tpwd/Ke_search package
2023
2022
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The ke_search (aka Faceted Search) extension through 2.8.2, and 3.x through 3.1.3, for TYPO3 allows XSS.