CVE-2008-2450 Multiple cross-site scripting (XSS) vulnerabilities in the Statistics (aka ke_stats) extension 0.1.2 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified...
MediumCVSS 4.3
EPSS 0.99%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Statistics (aka ke_stats) extension 0.1.2 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| inmedias statistics | = 0.0.1-alpha | No fix listed |
| inmedias statistics | = 0.1.0-beta | No fix listed |
| inmedias statistics | = 0.1.1-beta | No fix listed |
| inmedias statistics | = 0.1.2-beta | No fix listed |
References
- typo3.org broken-link
- kestats-unspecified-xss(42366) third-party-advisory vdb-entry