GitHub Advisoryadvisory · Packagist

GHSA-xvx2-wqf5-jjgv typo3/cms-felogin Cross-site Scripting vulnerability

LOW Published 2022-05-17 Modified 2025-04-09 Official page ↗
Aliases
CVE-2008-5656
Ecosystem
Packagist
Packages
typo3/cms-felogin
Severity
Low
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:P
Weaknesses
CWE-79
Reviewed
2025-04-09

Affected packages

• Packagist typo3/cms-felogin: >= 4.2.0, < 4.2.3 → fixed in 4.2.3

Description

Cross-site scripting (XSS) vulnerability in the frontend plugin for the felogin system extension in TYPO3 4.2.0, 4.2.1 and 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

Related

Alias · CVE (1)

  • CVE-2008-5656 Cross-site scripting (XSS) vulnerability in the frontend plugin for the felogin system extension in TYPO3 4.2.0, 4.2.1 and 4.2.2 allows… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References