CVE-2021-31778: MEDIA2CLICK Project MEDIA2CLICK

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

The media2click (aka 2 Clicks for External Media) extension 1.x before 1.3.3 for TYPO3 allows XSS by a backend user account.

Affected products

• MEDIA2CLICK Project MEDIA2CLICK: from 1.0.0, before 1.3.3 (fixed in 1.3.3)

Published 2021-04-28. Last modified 2026-06-17.