CVE-2009-4963: Commerce extension for TYPO3 vulnerable to Cross-site Scripting
Commerce extension for TYPO3 vulnerable to Cross-site Scripting
Other sources
Cross-site scripting (XSS) vulnerability in the Commerce extension before 0.9.9 for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/commerceteam/commerceto a version that resolves this vulnerability.Fixed in 0.9.9
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4963?
CVE-2009-4963 is considered a high severity vulnerability due to its potential for exploitation via cross-site scripting (XSS).
How do I fix CVE-2009-4963?
To fix CVE-2009-4963, upgrade the Commerce extension for TYPO3 to version 0.9.9 or later.
Who is affected by CVE-2009-4963?
CVE-2009-4963 affects users of the TYPO3 Commerce extension versions prior to 0.9.9.
What type of vulnerability is CVE-2009-4963?
CVE-2009-4963 is classified as a cross-site scripting (XSS) vulnerability.
What impact does CVE-2009-4963 have?
CVE-2009-4963 allows remote authenticated users to inject arbitrary web script or HTML, which can lead to unauthorized actions or data compromise.