CVE-2010-5100

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in packagist/typo3/cms-install

Identifiers

GHSA-9hh2-8cw6-hfv7, CVE-2010-5100

Package Slug

packagist/typo3/cms-install

Vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Install Tool in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected Versions

All versions starting from 4.2.0 before 4.2.16, all versions starting from 4.3.0 before 4.3.9, all versions starting from 4.4.0 before 4.4.5

Solution

Upgrade to versions 4.2.16, 4.3.9, 4.4.5 or above.

Last Modified

2024-02-09

source