CVE-2011-4626: XSS
Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the "JSwindow" property of the typolink function.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2011-4626?
CVE-2011-4626 is a vulnerability in TYPO3 that allows remote attackers to inject arbitrary web script or HTML via the "JSwindow" property of the typolink function.
How severe is CVE-2011-4626?
CVE-2011-4626 has a severity value of 6.1, which is considered medium.
What is the affected software for CVE-2011-4626?
The affected software for CVE-2011-4626 is TYPO3 versions before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4.
How can I exploit CVE-2011-4626?
To exploit CVE-2011-4626, an attacker would need to inject arbitrary web script or HTML via the "JSwindow" property of the typolink function.
How can I fix CVE-2011-4626?
To fix CVE-2011-4626, upgrade to TYPO3 version 4.3.12, 4.4.9, or 4.5.4, or apply the provided patches or remedies.