Description

Multiple cross-site scripting (XSS) vulnerabilities in the Install Tool in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2010-5100

Related Vulnerabilities

WordPress Plugin DethemeKit For Elementor Multiple Cross-Site Scripting Vulnerabilities (1.5.5.4)

WordPress Plugin UserPro-Community and User Profile Cross-Site Scripting (4.9.33)

Java Unspesificed Vulnerability (CVE-2018-2941)

Oracle JRE CVE-2012-5079 Vulnerability (CVE-2012-5079)

Ruby on Rails Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-0155)

Severity

Low

Classification

CVE-2010-5100 CWE-707

Tags

Missing Update Known Vulnerabilities