Description

Cross-site scripting (XSS) vulnerability in the Install Tool in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2012-3531

Related Vulnerabilities

WordPress Plugin Autoptimize Cross-Site Scripting (3.1.0)

WordPress Plugin Yes/No Chart SQL Injection (1.0.11)

Oracle JRE CVE-2020-2754 Vulnerability (CVE-2020-2754)

WordPress Plugin Easy Justified Gallery Cross-Site Scripting (1.0.8)

WordPress Plugin WooCommerce Email Test Information Disclosure (1.5)

Severity

Medium

Classification

CVE-2012-3531 CWE-707

Tags

Missing Update Known Vulnerabilities