CVE-2014-6296 WEC Map (wec_map) extension for TYPO3 allows Cross-site Scripting
MediumCVSS 4.3
EPSS 0.93%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the WEC Map (wec_map) extension before 3.0.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| web-tp3/wec_map(Packagist) | < 3.0.3 | 3.0.3 |
| web-tp3/wec_map(Packagist) | = 2.1.6 | No fix listed |
| jbartels/wec-map(Packagist) | < 3.0.3 | 3.0.3 |
| wec map project wec map | <= 3.0.2 | No fix listed |
| wec map project wec map | = 3.0.0 | No fix listed |
| wec map project wec map | = 3.0.1 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- typo3.org
- typo3.org patch
- typo3.org patch vendor-advisory
- github.com