Vulnerability advisory
GHSA-p9wg-jvj4-cx26
Typo3 Install Tool XSS Vulnerability
Also known as CVE-2012-3531
Severity
Severity not reported.
Affected versions
typo3/cms Packagist
All typo3/cms advisories →| Affected | Fixed in |
|---|---|
4.5 to before 4.5.19 | 4.5.19Advisories → |
4.6 to before 4.6.12 | 4.6.12Advisories → |
4.7 to before 4.7.4 | 4.7.4Advisories → |
Description
Cross-site scripting (XSS) vulnerability in the Install Tool in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.