CVE-2010-3674: XSS
Published Nov 5, 2019
·Updated
TYPO3 before 4.4.1 allows XSS in the frontend search box.
Affected Software
3 affected components
debian/typo3-src
Typo3 TYPO3<4.4.1
Debian Debian Linux=5.0
Event History
Nov 5, 2019
CVE Published
via MITRE·07:34 PM
Data Sourced
via MITRE·07:34 PM
Description
Feb 17, 2026
Data Sourced
via Debian·10:17 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-3674?
CVE-2010-3674 is classified as a high severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
2
How do I fix CVE-2010-3674?
To fix CVE-2010-3674, upgrade TYPO3 to version 4.4.1 or later.
3
Which versions of TYPO3 are affected by CVE-2010-3674?
CVE-2010-3674 affects TYPO3 versions prior to 4.4.1.
4
What type of vulnerability is CVE-2010-3674?
CVE-2010-3674 is a cross-site scripting (XSS) vulnerability in the frontend search box of TYPO3.
5
Can CVE-2010-3674 be exploited remotely?
Yes, CVE-2010-3674 can be exploited remotely by attackers through the frontend search input.