1 results (0.001 seconds)

CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0

Cross-site scripting (XSS) vulnerability in the mm_forum extension 1.8.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en la extensión mm_forum v1.8.2 y anteriores para TYPO3 permite a atacantes remotos inyectar código web o HTML de su elección a través de vectores no especificados. • http://typo3.org/extensions/repository/view/mm_forum/1.8.3 http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-007 http://www.securityfocus.com/bid/38825 https://exchange.xforce.ibmcloud.com/vulnerabilities/57037 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •