Description

Cross-site scripting (XSS) vulnerability in the Frontend Login Box (aka felogin) subcomponent in TYPO3 4.2.0 through 4.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

Remediation

References

CVE-2009-3634

Related Vulnerabilities

WordPress Plugin YITH WooCommerce Product Bundles Security Bypass (1.1.15)

Oracle JRE CVE-2012-1682 Vulnerability (CVE-2012-1682)

MySQL CVE-2020-2892 Vulnerability (CVE-2020-2892)

Oracle JRE CVE-2013-0431 Vulnerability (CVE-2013-0431)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-4539)

Severity

Medium

Classification

CVE-2009-3634 CWE-707

Tags

Missing Update Known Vulnerabilities