Markus Bucher

**Name of the Vulnerable Software and Affected Versions** foreman (affected versions not specified) **Description** A stored Cross-site scripting vulnerability was found in the Comment section of the Hosts tab, due to incorrect filtering of user input data. This allows an attacker with an existing account to steal another user's session, make requests on behalf of the user, and obtain user credentials. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TYPO3 versions 6.2.x through 6.2.15 TYPO3 versions 7.x through 7.5 **Description** The issue allows remote authenticated editors to inject arbitrary web script or HTML. This is due to multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components. **Recommendations** For TYPO3 versions 6.2.x through 6.2.15, update to version 6.2.16 or later. For TYPO3 versions 7.x through 7.5, update to version 7.6.1 or later.

**Name of the Vulnerable Software and Affected Versions** Basic SEO Features (seo basics) extension versions prior to 0.8.2 **Description** A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML. **Recommendations** For versions prior to 0.8.2, update to version 0.8.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** TYPO3 powermail extension versions prior to 1.6.5 **Description** A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. **Recommendations** For versions prior to 1.6.5, update to version 1.6.5 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** TYPO3 versions 4.5.x through 4.5.18 TYPO3 versions 4.6.x through 4.6.11 TYPO3 versions 4.7.x through 4.7.3 **Description** The issue allows remote authenticated backend users to inject arbitrary web script or HTML. This can be achieved via unspecified vectors in the backend of the software. **Recommendations** For TYPO3 versions 4.5.x through 4.5.18, update to version 4.5.19 or later. For TYPO3 versions 4.6.x through 4.6.11, update to version 4.6.12 or later. For TYPO3 versions 4.7.x through 4.7.3, update to version 4.7.4 or later.