TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4903)

Description

Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the RemoveXSS function.

Remediation

References

CVE-2011-4903

Related Vulnerabilities

osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-4744)

WordPress Plugin Wordfence Security-Firewall & Malware Scan Cross-Site Scripting (3.3.5)

Microsoft SQL Server CVE-2023-36728 Vulnerability (CVE-2023-36728)

Jboss EAP CVE-2024-7885 Vulnerability (CVE-2024-7885)

Mailman Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2021-42096)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N