Skip to content
OpenAdvisories

Archive

21 December 2013

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium —

    TYPO3 Flow Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in the errorAction method in the ActionController base class in TYPO3 Flow (formerly FLOW3) 1.1.x before 1.1.1 and 2.0.x before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified input…

  • Medium —

    TYPO3 Cross-site scripting (XSS) vulnerability in the Backend User Administration Module

    Cross-site scripting (XSS) vulnerability in the Backend User Administration Module in TYPO3 6.0.x before 6.0.12 and 6.1.x before 6.1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.