cvedb.io
CVE-2021-43561
MEDIUM · CVSS 5.4
EPSS exploitation probability: 0%
Published 2021-11-10T15:15:12.390 · Last modified 2026-06-17T04:11:08.327

Summary

An XSS issue was discovered in the google_for_jobs (aka Google for Jobs) extension before 1.5.1 and 2.x before 2.1.1 for TYPO3. The extension fails to properly encode user input for output in HTML context. A TYPO3 backend user account is required to exploit the vulnerability.

Affected products

pega-sus — google_for_jobs

Does this affect you?

Add your gear to cvedb and we'll alert you only when pega-sus ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.