TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4626)

Description

Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the "JSwindow" property of the typolink function.

Remediation

References

CVE-2011-4626

Related Vulnerabilities

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-9711)

WordPress Plugin Translate WordPress-Google Language Translator Cross-Site Scripting (6.0.11)

WordPress 2.1.2 Multiple Vulnerabilities (2.1 - 2.1.2)

Oracle Database Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-6065)

WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-6634)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N