CVE-2008-2490

CVE-2008-2490

EPSS 1.0%

Cross-site scripting (XSS) vulnerability in the KJ Image Lightbox 2 (aka kj_imagelightbox2) extension 1.4.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified "user input."

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/30386 https://exchange.xforce.ibmcloud.com/vulnerabilities/42628 http://typo3.org/teams/security/security-bulletins/typo3-20080527-1/http://www.vupen.com/english/advisories/2008/1666/references