Description

Cross-site scripting (XSS) vulnerability in Extension Manager in TYPO3 4.5.x before 4.5.32 and 4.7.x before 4.7.17 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2013-7076

Related Vulnerabilities

WordPress Plugin Advanced Order Export For WooCommerce Cross-Site Scripting (3.1.3)

Family Connections Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-4338)

WordPress 2.6.3 Cross-Site Scripting Vulnerability (0.6.2 - 2.6.3)

WordPress Plugin Participants Database SQL Injection (1.5.4.8)

WordPress Plugin Ultimate Membership Pro SQL Injection (6.4)

Severity

Medium

Classification

CVE-2013-7076 CWE-707

Tags

Missing Update Known Vulnerabilities