TI-2010-04608 CVE-2010-4885 · GHSA-x23m-r8w4-7j4xCross-site scripting (XSS) vulnerability in the XING Button (xing) extension before 1.0.2…Priority LOW 22Cross-site scripting (XSS) vulnerability in the XING Button (xing) extension before 1.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01053 · Published 2011-10-07 · No fix listed CWE-79