CVE-2024-34355

Name of the Vulnerable Software and Affected Versions TYPO3 versions 13.0.0 through 13.1.0

Description The history backend module is vulnerable to HTML injection. Although Content-Security-Policy headers effectively prevent JavaScript execution, adversaries can still inject malicious HTML markup. Exploiting this issue requires a valid backend user account.

Recommendations Update to TYPO3 version 13.1.1 to fix the problem.