Description
Cross-site scripting (XSS) vulnerability in the KJ Image Lightbox 2 (aka kj_imagelightbox2) extension 1.4.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified "user input."
References
- ADV-2008-1666 vdb-entry
- http://typo3.org/teams/security/security-bulletins/typo3-20080527-1/
- kjimagelightbox2-unspecified-xss(42628) vdb-entry
- 30386 third-party-advisory