XSS in TYPO3

CVE-2009-3634

Cross-site scripting (XSS) vulnerability in the Frontend Login Box (aka felogin) subcomponent in TYPO3 4.2.0 through 4.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.020 (78.3th percentile) — read the EPSS interpretation.

Affected products

  • Typo3 — versions 4.2.0, 4.2.1, 4.2.2
  • N/a — versions n/a

Weakness classification (CWE)

References