CVE-2009-3633

Description

Cross-site scripting (XSS) vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the sanitizing algorithm.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/53925

http://www.vupen.com/english/advisories/2009/3009

http://www.securityfocus.com/bid/36801

http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/

http://secunia.com/advisories/37122

http://marc.info/?l=oss-security&m=125633199111438&w=2

http://marc.info/?l=oss-security&m=125632856206736&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3