VYPR
← All advisories
Unrated severityNVD Advisory· Published May 27, 2008· Updated Jun 16, 2026

CVE-2008-2450

CVE-2008-2450

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Statistics (aka ke_stats) extension 0.1.2 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

5
  • Inmedias/Statistics4 versions
    cpe:2.3:a:inmedias:statistics:0.0.1:alpha:*:*:*:typo3:*:*+ 3 more
    • cpe:2.3:a:inmedias:statistics:0.0.1:alpha:*:*:*:typo3:*:*
    • cpe:2.3:a:inmedias:statistics:0.1.0:beta:*:*:*:typo3:*:*
    • cpe:2.3:a:inmedias:statistics:0.1.1:beta:*:*:*:typo3:*:*
    • cpe:2.3:a:inmedias:statistics:0.1.2:beta:*:*:*:typo3:*:*
  • TYPO3/ke_statsllm-fuzzy
    Range: <=0.1.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.