Description
Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the system extension recycler.
Remediation
References
Related Vulnerabilities
WordPress Plugin InstaWP Connect-1-click WP Staging & Migration Security Bypass (0.1.0.44)
TYPO3 Other Vulnerability (CVE-2006-0327)
WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.23)
Lighttpd Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2022-41556)
WordPress Plugin Hero Maps Premium Cross-Site Scripting (2.2.1)