Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2010-3659
3.5
LOWCVSS v2
Published
October 20, 2017
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 CMS 4.1.x before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4, and 4.4.x before 4.4.1 allow remote authenticated backend users to inject arbitrary web script or HTML via unspecified parameters to the extension manager, or unspecified parameters to unknown backend forms.
TYPO3/typo3
GitHubThe TYPO3 Core - Enterprise Content Management System. Synchronized mirror of https://review.typo3.org/q/project:Packages/TYPO3.CMS
GitHubThe TYPO3 Core - Enterprise Content Management System. Synchronized mirror of https://review.typo3.org/q/project:Packages/TYPO3.CMS= 4.2.10, = 4.1.11, = 4.1.1, = 4.2.4, = 4.2.5, = 4.2.11, = 4.1.8, = 4.1.6, = 4.2.0, = 4.3.1, = 4.3.2, = 4.3.3, = 4.2.1, = 4.1.0, = 4.1.3, = 4.3.0, = 4.2.2, = 4.1.4, = 4.1.13, = 4.2.6, = 4.2.8, = 4.1.9, = 4.1.12, = 4.4.0, = 4.2.3, = 4.2.12, = 4.1.7, = 4.1.2, = 4.2.7, = 4.2.9, = 4.1.10, = 4.1.5NVD