TYPO3 Cross-site scripting (XSS) vulnerability in the click enlarge functionality
Date: 2022-05
Affected: composer/typo3/cms-frontend, composer/typo3/cms-frontend
Attack vector: xss
Category: vulnerability-disclosure
Severity: Low
CVE: CVE-2010-5097
CVE-2010-5098
CVE-2010-5100
CWE: CWE-79

Cross-site scripting (XSS) vulnerability in the click enlarge functionality in TYPO3 4.3.x before 4.3.9 and 4.4.x before 4.4.5 when the caching framework is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Mitigations:

Architectural layers (MAESTRO):