Description

Cross-site scripting (XSS) vulnerability in the frontend plugin for the felogin system extension in TYPO3 4.2.0, 4.2.1 and 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

Remediation

References

CVE-2008-5656

Related Vulnerabilities

Atlassian Jira Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-15001)

Ruby Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2013-4164)

WordPress Plugin Wow Forms-create any form with custom style SQL Injection (2.1)

WordPress Plugin Subscribe To Comments Reloaded Cross-Site Scripting (150611)

WordPress Plugin Redirect 404 Error Page to Homepage or Custom Page with Logs Cross-Site Request Forgery (1.7.8)

Severity

Medium

Classification

CVE-2008-5656 CWE-707

Tags

Missing Update Known Vulnerabilities