Description

Cross-site scripting (XSS) vulnerability in the Exception Handler in TYPO3 4.4.x before 4.4.15, 4.5.x before 4.5.15, 4.6.x before 4.6.8, and 4.7 allows remote attackers to inject arbitrary web script or HTML via exception messages.

Remediation

References

CVE-2012-2112

Related Vulnerabilities

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-1878)

IBM RTC Incorrect Authorization Vulnerability (CVE-2017-1700)

WordPress Plugin GiveWP-Donation and Fundraising Platform Cross-Site Scripting (0.8)

WordPress Plugin LearnPress-WordPress LMS SQL Injection (3.2.6.7)

Ruby on Rails Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2006-4111)

Severity

Medium

Classification

CVE-2012-2112 CWE-707

Tags

Missing Update Known Vulnerabilities