CVE-2021-21340

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 10.4.14, 11.1.1 it has been discovered that database fields used as _descriptionColumn_ are vulnerable to cross-site scripting when their content gets previewed. A valid backend user account is needed to exploit this vulnerability. This is fixed in versions 10.4.14, 11.1.1 .

• CWE-79
• CWE-79

• https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-fjh3-g8gq-9q92Third Party Advisory
• https://packagist.org/packages/typo3/cms-backendRelease Notes, Third Party Advisory
• https://typo3.org/security/advisory/typo3-core-sa-2021-007Vendor Advisory
• https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-fjh3-g8gq-9q92Third Party Advisory
• https://packagist.org/packages/typo3/cms-backendRelease Notes, Third Party Advisory
• https://typo3.org/security/advisory/typo3-core-sa-2021-007Vendor Advisory

Published

Mar 23, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-21335In the SPNEGO HTTP Authentication Module for nginx (spnego-h…9.8
• CVE-2021-21336Products.PluggableAuthService is a pluggable Zope authentica…6.5
• CVE-2021-21337Products.PluggableAuthService is a pluggable Zope authentica…6.1
• CVE-2021-21338TYPO3 is an open source PHP based web content management sys…6.1
• CVE-2021-21339TYPO3 is an open source PHP based web content management sys…7.5
• CVE-2021-2134Vulnerability in the Enterprise Manager for Fusion Middlewar…6.5
• CVE-2021-21341XStream is a Java library to serialize objects to XML and ba…7.5
• CVE-2021-21342XStream is a Java library to serialize objects to XML and ba…9.1
• CVE-2021-21343XStream is a Java library to serialize objects to XML and ba…7.5
• CVE-2021-21344XStream is a Java library to serialize objects to XML and ba…9.8
• CVE-2021-21345XStream is a Java library to serialize objects to XML and ba…9.9
• CVE-2021-21346XStream is a Java library to serialize objects to XML and ba…9.8