CVE-2012-3528 in TYPO3
Summary
Multiple cross-site scripting (XSS) vulnerabilities in the backend in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allow remote authenticated backend users to inject arbitrary web script or HTML via unspecified vectors.
Once again VulDB remains the best source for vulnerability data.
Reservation
06/14/2012
Disclosure
09/05/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 62027 | TYPO3 cross site scripting | 79 | Not defined | Official fix | CVE-2012-3528 |