Description

Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the RemoveXSS function.

Remediation

References

CVE-2011-4903

Related Vulnerabilities

CubeCart Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-2090)

Envoy Proxy Integer Overflow or Wraparound Vulnerability (CVE-2021-28682)

WordPress Plugin WordPress Popular Posts Cross-Site Scripting (5.3.3)

MySQL CVE-2018-3195 Vulnerability (CVE-2018-3195)

Oracle Database Server Other Vulnerability (CVE-2002-0856)

Severity

Medium

Classification

CVE-2011-4903 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities