CVE-2013-4749: XSS
Published Jul 1, 2013
·Updated
Cross-site scripting (XSS) vulnerability in the UserTask Center, Messaging (sysmessages) extension 1.1.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
2 affected components
Usertask Center Messaging Project Usertask Center Messaging<=1.1.0
Typo3 TYPO3
Event History
Jul 1, 2013
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-4749?
CVE-2013-4749 has a medium severity level due to its cross-site scripting (XSS) nature.
2
How do I fix CVE-2013-4749?
To fix CVE-2013-4749, upgrade the UserTask Center Messaging extension to version 1.1.1 or later.
3
What is the impact of CVE-2013-4749?
CVE-2013-4749 could allow remote attackers to inject arbitrary web scripts or HTML into the affected application.
4
Which versions of TYPO3 are affected by CVE-2013-4749?
CVE-2013-4749 specifically affects the UserTask Center Messaging extension version 1.1.0 and earlier.
5
What type of vulnerability is CVE-2013-4749?
CVE-2013-4749 is classified as a cross-site scripting (XSS) vulnerability.