CVE-2010-0797: XSS
Published Mar 2, 2010
·Updated
Cross-site scripting (XSS) vulnerability in the T3BLOG extension 0.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
10 affected components
Snowflake T3blog<=0.6.2
Snowflake T3blog=0.5.0
Snowflake T3blog=0.6.0
Snowflake T3blog=0.6.1
Typo3 TYPO3
All of the following
Any of the following
Snowflake T3blog<=0.6.2
Snowflake T3blog=0.5.0
Snowflake T3blog=0.6.0
Snowflake T3blog=0.6.1
Typo3 TYPO3
Remediation
Patch Available
Event History
Mar 2, 2010
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Data Sourced
08:30 PM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·08:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0797?
CVE-2010-0797 is classified as a moderate severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2010-0797?
To fix CVE-2010-0797, update the T3BLOG extension to version 0.6.3 or later.
3
What versions are affected by CVE-2010-0797?
CVE-2010-0797 affects T3BLOG versions 0.6.2 and earlier, including version 0.5.0, 0.6.0, and 0.6.1.
4
Who can exploit CVE-2010-0797?
Any remote attacker can exploit CVE-2010-0797 to inject arbitrary web scripts or HTML.
5
What is the impact of CVE-2010-0797?
The impact of CVE-2010-0797 allows attackers to perform cross-site scripting attacks, potentially stealing user data or compromising web sessions.