Description
Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the RemoveXSS function, and allow remote authenticated users to inject arbitrary web script or HTML via vectors related to (2) the backend.
Remediation
References
Related Vulnerabilities
MySQL CVE-2021-35636 Vulnerability (CVE-2021-35636)
XWikiplatform Incorrect Privilege Assignment Vulnerability (CVE-2025-49580)
WordPress Plugin WP Unique Article Header Image Cross-Site Request Forgery (1.0)
WordPress Plugin Snazzy Maps Multiple Cross-Site Scripting Vulnerabilities (1.1.3)
WordPress Plugin Coming Soon Multiple Vulnerabilities (1.1.18)