Description TYPO3 before 4.5.4 allows Information Disclosure in the backend. Remediation References CVE-2011-4900 Related Vulnerabilities WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple Cross-Site Scripting Vulnerabilities (2.0.66.16) PHP Improper Input Validation Vulnerability (CVE-2016-4537) Jolokia Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-0168) PrestaShop Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2018-7491) VirtueMart access control bypass Severity Medium Classification CVE-2011-4900 CWE-200 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Tags Missing Update Known Vulnerabilities