Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the RemoveXSS function, and allow remote authenticated users to inject arbitrary web script or HTML via vectors related to (2) the backend.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TYPO3多个跨站脚本攻击漏洞
Vulnerability Description
TYPO3 是基于PHP和MySQL数据库的开源内容管理系统(CMS)和内容管理框架(CMF)的领导性品牌之一，是强大的开源解决方案。 TYPO3 4.2.15之前的4.2.x版本，4.3.7之前的4.3.x版本以及4.4.4之前的4.4.x版本中存在多个跨站脚本攻击漏洞。远程攻击者可以借助与(1)RemoveXSS函数有关的向量注入任意web脚本或者HTML，远程认证用户可以借助与(2)后端有关的向量注入任意web脚本或者HTML。
CVSS Information
N/A
Vulnerability Type
N/A