Description
Multiple cross-site scripting (XSS) vulnerabilities in the Send-A-Card (sr_sendcard) extension 2.2.2 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- sendacard-unspecified-xss(43510) vdb-entry
- 46624 vdb-entry
- 30028 vdb-entry
- http://typo3.org/teams/security/security-bulletins/typo3-20080701-3/
- 30906 third-party-advisory