CVE-2013-4746: XSS
Published Jul 1, 2013
·Updated
Cross-site scripting (XSS) vulnerability in the My quiz and poll (myquizpoll) extension before 2.0.6 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
19 affected components
Kurt Gusbeth Myquizpoll<=1.4.0
Kurt Gusbeth Myquizpoll=0.1.1
Kurt Gusbeth Myquizpoll=0.1.2
Kurt Gusbeth Myquizpoll=0.1.3
Kurt Gusbeth Myquizpoll=0.1.4
Kurt Gusbeth Myquizpoll=0.1.5
Kurt Gusbeth Myquizpoll=0.1.6
Kurt Gusbeth Myquizpoll=0.1.7
Kurt Gusbeth Myquizpoll=0.2.0
Kurt Gusbeth Myquizpoll=0.2.1
Kurt Gusbeth Myquizpoll=0.2.2
Kurt Gusbeth Myquizpoll=0.3.0
Kurt Gusbeth Myquizpoll=0.4.0
Kurt Gusbeth Myquizpoll=1.0.0
Kurt Gusbeth Myquizpoll=1.0.1
Kurt Gusbeth Myquizpoll=1.1.0
Kurt Gusbeth Myquizpoll=1.2.0
Kurt Gusbeth Myquizpoll=1.3.0
Typo3 TYPO3
Event History
Jul 1, 2013
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-4746?
CVE-2013-4746 has a moderate severity rating as it allows cross-site scripting (XSS) attacks.
2
How do I fix CVE-2013-4746?
To fix CVE-2013-4746, upgrade the My quiz and poll (myquizpoll) extension to version 2.0.6 or higher.
3
What versions are affected by CVE-2013-4746?
Versions of the My quiz and poll extension prior to 2.0.6, including 1.4.0 and earlier, are affected by CVE-2013-4746.
4
Can CVE-2013-4746 lead to data leakage?
Yes, CVE-2013-4746 can potentially allow attackers to execute arbitrary scripts, which may lead to data leakage.
5
Who can exploit CVE-2013-4746?
CVE-2013-4746 can be exploited by remote attackers who can inject malicious web scripts or HTML into the application.