CVE-2011-4903
MEDIUM6.1EPSS 0.33%Typo3 XSS in RemoveXSS function
Published: 4/22/2022Modified: 1/12/2024
Also known as:GHSA-q22w-r5qq-v3wf
Description
Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the RemoveXSS function.
Affected packages (1)
- Packagist/typo3/cmsfrom 0, < 4.3.12
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM6.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |