TYPO3 Cross-site scripting (XSS) vulnerability in the FORM content object
Cross-site scripting (XSS) vulnerability in the FORM content object in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2010-5098US | low3.5 | — | ||
Cross-site scripting (XSS) vulnerability in the FORM content object in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5, allows remote authenticated users to i… | ||||
02
references
External citations — patches, advisories, analysis.
- http://www.openwall.com/lists/oss-security/2011/01/13/2WEB
- http://www.openwall.com/lists/oss-security/2012/05/10/7WEB
- http://www.openwall.com/lists/oss-security/2012/05/11/3WEB
- http://www.openwall.com/lists/oss-security/2012/05/12/5WEB
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64179WEB
- https://github.com/TYPO3-CMS/frontendPACKAGE
- https://github.com/TYPO3/typo3/commit/3c5d15233ca765fabeac21f0600d831595d31cd8WEB
- https://github.com/TYPO3/typo3/commit/4e8bd7a15681c0683196984e871f60f0646ea2b6WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan