TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4632)

Description

Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the tcemain flash message.

Remediation

References

CVE-2011-4632

Related Vulnerabilities

WordPress Plugin ARS Reg Secure Cross-Site Scripting (1.1)

WordPress Plugin Dynamic Content for Elementor Remote Code Execution (1.9.5.6)

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-6341)

WordPress Multiple Cross-Site Scripting Vulnerabilities (2.0 - 2.0.1)

WordPress Plugin Patreon WordPress PHP Object Injection (1.2.1)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N