Skip to content

CVE-2015-4608 Cross-site scripting (XSS) vulnerability in the BE User Log (beko_beuserlog) extension 1.1.1 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecif...

LowCVSS 3.5 EPSS 0.76%
Published
Updated
Exploit status
No public exploit known

Description

Cross-site scripting (XSS) vulnerability in the BE User Log (beko_beuserlog) extension 1.1.1 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected products

ProductAffected versionsFixed in
be user log project be user log <= 1.1.1 No fix listed

References