medium4.3
CVE-2009-4953
Cross-site scripting (XSS) vulnerability in the Userdata Create/Edit (sg_userdata) extension before 0.91.0 for TYPO3 allows remote attackers to inject arbitrar…
Impact
Cross-site scripting (XSS) vulnerability in the Userdata Create/Edit (sg_userdata) extension before 0.91.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Stefan Geith | Sg Userdata | through 0.90.300 Versions 0.90.100, 0.90.101, 0.90.109, 0.90.111, 0.90.202 |