Description
Cross-site scripting (XSS) vulnerability in the Static Info Tables (static_info_tables) extension before 2.3.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | sjbr/static-info-tables | < 2.3.1 | 2.3.1 | GHSA-6p8h-36qp-8h72 |
References
- http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-004/
- http://typo3.org/extensions/repository/view/static_info_tables
- 90414 vdb-entry
- 58056 vdb-entry
- 52283 third-party-advisory
- staticinfotables-unspecified-xss(82212) vdb-entry