Description

TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS and Open Redirection in the frontend login box.

Remediation

References

CVE-2010-3669

Related Vulnerabilities

WordPress 3.7.x Denial of Service Vulnerability (3.7 - 3.7.25)

WordPress Plugin Fungif The Awesome GIFs Cross-Site Scripting (2.0)

WordPress Plugin Calendar Unspecified Vulnerability (1.3.10)

MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-8976)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-2645)

Severity

Medium

Classification

CVE-2010-3669 CWE-601 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities