Description

Cross-site scripting (XSS) vulnerability in the click enlarge functionality in TYPO3 4.3.x before 4.3.9 and 4.4.x before 4.4.5 when the caching framework is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2010-5097

Related Vulnerabilities

WordPress Plugin Admin Custom Login Cross-Site Request Forgery (3.2.7)

Jenkins Incorrect Authorization Vulnerability (CVE-2018-1999004)

WordPress Plugin GiveWP-Donation and Fundraising Platform Multiple Vulnerabilities (2.20.2)

WordPress Plugin Portfolio by BestWebSoft Cross-Site Scripting (2.39)

Microsoft SQL Server Other Vulnerability (CVE-2001-0879)

Severity

Low

Classification

CVE-2010-5097 CWE-707

Tags

Missing Update Known Vulnerabilities