CVE-2015-4608

LOW 3.5CVE-2015-4608 · Published 16/06/2015 · updated 17/06/2026

In short

CVE-2015-4608 is a LOW (CVSS 3.5) vulnerability affecting be user log (be user log project).
Chance of exploitation in the next 30 days (EPSS): 0.76%, higher than 55.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
be user log be_user_log_project	`≤ 1.1.1`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the BE User Log (beko_beuserlog) extension 1.1.1 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

References

typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2015-007 · Vendor Advisory
securityfocus.com/bid/75247

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free