CVE-2009-3636

GHSA-c73w-4rcj-2622, CVE-2009-3636

packagist/typo3/cms-install

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross-site scripting (XSS) vulnerability in the Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

All versions up to 4.0.13, all versions starting from 4.1.0 before 4.1.13, all versions starting from 4.2.0 before 4.2.10, all versions starting from 4.3alpha1 before 4.3beta2

Upgrade to versions 4.1.13, 4.2.10, 4.3beta2 or above.

2024-02-09