Description

Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the RemoveXSS function, and allow remote authenticated users to inject arbitrary web script or HTML via vectors related to (2) the backend.

Remediation

References

CVE-2010-3715

Related Vulnerabilities

WordPress Plugin Bangla Sidebar Login Cross-Site Scripting (1.0)

WordPress Plugin Raygun4WP Cross-Site Scripting (1.8.0)

Apache HTTP Server CVE-2013-1862 Vulnerability (CVE-2013-1862)

osCommerce Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2020-27976)

Oracle Database Server CVE-2009-3411 Vulnerability (CVE-2009-3411)

Severity

Medium

Classification

CVE-2010-3715 CWE-707

Tags

Missing Update Known Vulnerabilities