Description

Cross-site scripting (XSS) vulnerability in the frontend plugin for the felogin system extension in TYPO3 4.2.0, 4.2.1 and 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

Remediation

References

CVE-2008-5656

Related Vulnerabilities

WordPress Plugin WP Post Rating Security Bypass (2.4.6)

Drupal Core 9.3.x Security Bypass (9.3.0 - 9.3.5)

WordPress Multiple Cross-Site Scripting Vulnerabilities (2.0.11 - 2.3)

MySQL CVE-2021-35647 Vulnerability (CVE-2021-35647)

Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2009-1280)

Severity

Medium

Classification

CVE-2008-5656 CWE-707

Tags

Missing Update Known Vulnerabilities