CVE-2009-4953

MEDIUM 4.3CVE-2009-4953 · Published 22/07/2010 · updated 16/06/2026

In short

CVE-2009-4953 is a MEDIUM (CVSS 4.3) vulnerability affecting sg userdata (stefan geith).
Chance of exploitation in the next 30 days (EPSS): 0.85%, higher than 58.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sg userdata stefan_geith	`= 0.90.100= 0.90.101= 0.90.109= 0.90.111= 0.90.202= 0.90.210≤ 0.90.300`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the Userdata Create/Edit (sg_userdata) extension before 0.91.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

typo3.org/teams/security/security-bulletins/typo3-sa-2009-005 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free