Description

Cross-site scripting (XSS) vulnerability in the file backend module in TYPO3 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

Remediation

References

CVE-2008-5644

Related Vulnerabilities

WordPress Plugin Integration for Contact Form 7 and Zoho Cross-Site Scripting (1.1.7)

PostgreSQL Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2005-0227)

Bootstrap Table Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-1726)

Drupal Core 6.x Multiple Vulnerabilities (6.0 - 6.12)

WordPress Plugin WordPress Affiliates-SliceWP Cross-Site Scripting (1.0.45)

Severity

Medium

Classification

CVE-2008-5644 CWE-707

Tags

Missing Update Known Vulnerabilities