Unscored CVE-2008-4903 EUVD-2008-4882GHSA-43jj-9cx6-pch8

Cross-site scripting (XSS) vulnerability in the leave comment (feedback) feature in Typo 5.1.3 and earlier allows remote attackers to injec…

Published Nov 4, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the leave comment (feedback) feature in Typo 5.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) comment[author] (Name) and (2) comment[url] (Website) parameters.

References

20081031 Typo <= 5.1.3 Multiple Vulnerabilities mailing-list
32272 third-party-advisory
31993 vdb-entry
typo-commentauthor-commenturl-xss(46204) vdb-entry
4550 third-party-advisory