← Database

CVE-2009-4963

LOW CVSS: 3.5 Published: 2010-07-28 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the Commerce extension before 0.9.9 for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected Platforms

Typo3 Typo3Typo3 Commerce Extension

Weakness Type

CWE-79

References