Multiple cross-site scripting (XSS) vulnerabilities in the backend user interface in TYPO3 3.3.x up to and including 3.8.x, 4.0 prior to 4.0.12, 4.1 prior to 4.1.10, 4.2 prior to 4.2.6, and 4.3alpha1 allow remote malicious users to inject arbitrary web script or HTML via unspecified fields.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
typo3 typo3 4.0.3 |
||
typo3 typo3 4.0.4 |
||
typo3 typo3 4.0.11 |
||
typo3 typo3 4.1 |
||
typo3 typo3 4.1.8 |
||
typo3 typo3 4.1.9 |
||
typo3 typo3 4.0.5 |
||
typo3 typo3 4.0.6 |
||
typo3 typo3 4.1.1 |
||
typo3 typo3 4.1.2 |
||
typo3 typo3 4.1.3 |
||
typo3 typo3 4.2 |
||
typo3 typo3 4.2.1 |
||
typo3 typo3 4.0.1 |
||
typo3 typo3 4.0.2 |
||
typo3 typo3 4.0.9 |
||
typo3 typo3 4.0.10 |
||
typo3 typo3 4.1.6 |
||
typo3 typo3 4.1.7 |
||
typo3 typo3 4.2.4 |
||
typo3 typo3 4.2.5 |
||
typo3 typo3 4.0 |
||
typo3 typo3 4.0.7 |
||
typo3 typo3 4.0.8 |
||
typo3 typo3 4.1.4 |
||
typo3 typo3 4.1.5 |
||
typo3 typo3 4.2.2 |
||
typo3 typo3 4.2.3 |
Vulmon