CVE-2013-4746

2022-10-0316:14:59

mitre

www.cve.org

cve-2013-4746

typo3

web script injection

html injection

remote attackers

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.7%

JSON

Cross-site scripting (XSS) vulnerability in the My quiz and poll (myquizpoll) extension before 2.0.6 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

osvdb.org/90409

typo3.org/extensions/repository/view/myquizpoll

typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-005/