Description

Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the admin panel.

Remediation

References

CVE-2011-4629

Related Vulnerabilities

Sqlite CVE-2015-5895 Vulnerability (CVE-2015-5895)

WordPress Plugin Skysa App Bar Integration 'submit' Parameter Cross-Site Scripting (1.03)

WordPress Plugin Ads Pro-Multi-Purpose WordPress Advertising Manager Multiple Vulnerabilities (3.4)

WordPress Plugin Support Ticket System Multiple SQL Injection Vulnerabilities (1.2)

WordPress Plugin Credova_Financial Information Disclosure (1.4.8)

Severity

Medium

Classification

CVE-2011-4629 CWE-707 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities