CVE-2008-2274

sr_feuser_register_extension 1.4.0, 1.6.0, 2.2.1-2.2.7, 2.3.0-2.3.6, 2.4.0, 2.5.0-2.5.9 - Cross-Site Scripting

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (4)

Core 4
Core References
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30275
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/29239
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/42443

Scores

EPSS 0.0029
EPSS Percentile 52.0%

Details

CWE
CWE-79
Status published
Products (25)
typo3/sr_feuser_register_extension 1.4.0
typo3/sr_feuser_register_extension 1.6.0
typo3/sr_feuser_register_extension 2.2.1
typo3/sr_feuser_register_extension 2.2.2
typo3/sr_feuser_register_extension 2.2.3
typo3/sr_feuser_register_extension 2.2.4
typo3/sr_feuser_register_extension 2.2.5
typo3/sr_feuser_register_extension 2.2.6
typo3/sr_feuser_register_extension 2.2.7
typo3/sr_feuser_register_extension 2.3.0
... and 15 more
Published May 16, 2008
Tracked Since Feb 18, 2026