Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2010-3715
4.3
MEDIUMCVSS v2
Published
October 25, 2010
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the RemoveXSS function, and allow remote authenticated users to inject arbitrary web script or HTML via vectors related to (2) the backend.
TYPO3/typo3
GitHubThe TYPO3 Core - Enterprise Content Management System. Synchronized mirror of https://review.typo3.org/q/project:Packages/TYPO3.CMS
GitHubThe TYPO3 Core - Enterprise Content Management System. Synchronized mirror of https://review.typo3.org/q/project:Packages/TYPO3.CMS= 4.2.10, = 4.3.6, = 4.2.14, = 4.3.5, = 4.2.4, = 4.2.5, = 4.2.11, = 4.2.0, = 4.2.8, = 4.2.12, = 4.2.9, = 4.2.2, = 4.3.1, = 4.4.1, = 4.4.3, = 4.2.3, = 4.2.6, = 4.2.7, = 4.3.2, = 4.3.3, = 4.3.4, = 4.2.1, = 4.2.13, = 4.3.0, = 4.4, = 4.4.2NVD