CVE-2008-2274: XSS
Cross-site scripting (XSS) vulnerability in the srfeuserregister 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2274?
CVE-2008-2274 is classified as a medium severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2008-2274?
To fix CVE-2008-2274, upgrade the TYPO3 sr_feuser_register extension to a version that is not affected, specifically versions above 2.5.9.
Which versions of TYPO3 are affected by CVE-2008-2274?
CVE-2008-2274 affects TYPO3 sr_feuser_register versions 1.4.0, 1.6.0, and 2.2.1 to 2.5.9.
What type of attacks can CVE-2008-2274 facilitate?
CVE-2008-2274 can facilitate cross-site scripting (XSS) attacks, allowing attackers to inject arbitrary web scripts or HTML.
Is there a patch available for CVE-2008-2274?
There is no specific patch; users should upgrade to the latest unaffected version of the TYPO3 sr_feuser_register extension.