CVE-2021-43561

Published: Nov 10, 2021Modified: Jun 17, 2026

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

An XSS issue was discovered in the google_for_jobs (aka Google for Jobs) extension before 1.5.1 and 2.x before 2.1.1 for TYPO3. The extension fails to properly encode user input for output in HTML context. A TYPO3 backend user account is required to exploit the vulnerability.

Affected (2)

Products: Pega Sus: Google For Jobs

1 product

Google For Jobs

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Pega Sus Google For Jobs	Before 1.5.1
Pega Sus Google For Jobs	From 2.0.0 to 2.1.1

Related CWEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

https://typo3.org/security/advisory/typo3-ext-sa-2021-015

Source: cve@mitre.org

PatchThird Party Advisory

https://typo3.org/security/advisory/typo3-ext-sa-2021-015

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.