Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2022/05/17 1:55 a.m.•47 views

TYPO3 Cross-site scripting (XSS) vulnerability in the click enlarge functionality

Cross-site scripting XSS vulnerability in the click enlarge functionality in TYPO3 4.3.x before 4.3.9 and 4.4.x before 4.4.5 when the caching framework is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

2.6CVSS6AI score0.01613EPSS
SaveExploits0References10Affected Software1
OSV
OSV
•added 2022/05/17 1:55 a.m.•30 views

GHSA-9HW3-4GVP-8MV5 TYPO3 Cross-site scripting (XSS) vulnerability in the click enlarge functionality

Cross-site scripting XSS vulnerability in the click enlarge functionality in TYPO3 4.3.x before 4.3.9 and 4.4.x before 4.4.5 when the caching framework is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

2.6CVSS5.4AI score0.01613EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/05/21 12:00 a.m.•5 views

CVE-2010-5097: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the click enlarge functionality in TYPO3 4.3.x before 4.3.9 and 4.4.x before 4.4.5 when the caching framework is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

2.6CVSS6AI score0.01613EPSS
SaveExploits0References2
Rows per page
Query Builder