Description

Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the system extension recycler.

Remediation

References

CVE-2011-4631

Related Vulnerabilities

WordPress Plugin WP Social Feed Gallery Cross-Site Request Forgery (2.4.7)

WordPress Plugin Appointments Scheduler Cross-Site Scripting (1.5)

Oracle JRE CVE-2013-1561 Vulnerability (CVE-2013-1561)

WordPress Plugin Picturesurf Gallery 'upload.php' Arbitrary File Upload (1.2)

WordPress Plugin WPBook Cross-Site Request Forgery (2.7)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2011-4631