What is GHSA-xvx2-wqf5-jjgv?

GHSA-xvx2-wqf5-jjgv is a security advisory published by GitHub Security Advisories with Low severity. typo3/cms-felogin Cross-site Scripting vulnerability

Which CVE IDs does GHSA-xvx2-wqf5-jjgv cover?

GHSA-xvx2-wqf5-jjgv covers the following CVE IDs: CVE-2008-5656. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-xvx2-wqf5-jjgv?

GHSA-xvx2-wqf5-jjgv affects 1 product, including: composer/typo3/cms-felogin:\u003e= 4.2.0, \u003c 4.2.3.

GHSA-xvx2-wqf5-jjgvLow

typo3/cms-felogin Cross-site Scripting vulnerability

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

April 9, 2025

🔗 CVE IDs covered (1)

CVE-2008-5656 →

📋 Description

Cross-site scripting (XSS) vulnerability in the frontend plugin for the felogin system extension in TYPO3 4.2.0, 4.2.1 and 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

🎯 Affected products1

composer/typo3/cms-felogin:>= 4.2.0, < 4.2.3

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2008-5656
https://exchange.xforce.ibmcloud.com/vulnerabilities/46591
https://web.archive.org/web/20090701000000*/http://typo3.org/teams/security/security-bulletins/typo3-20081113-2
https://web.archive.org/web/20210214231108/https://www.securityfocus.com/bid/32284
https://github.com/advisories/GHSA-xvx2-wqf5-jjgv