Unscored CVE-2014-3949 EUVD-2014-3882GHSA-x432-5xp7-vvxj

Cross-site scripting (XSS) vulnerability in the layout wizard in the Grid Elements (gridelements) extension before 1.5.1 and 2.0.x before 2…

Published Jun 4, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the layout wizard in the Grid Elements (gridelements) extension before 1.5.1 and 2.0.x before 2.0.3 for TYPO3 allows remote authenticated backend users to inject arbitrary web script or HTML via unspecified vectors.

References

http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-008
http://typo3.org/extensions/repository/view/gridelements
58592 third-party-advisory
[oss-security] 20140603 Re: CVE ID request: typo3 mailing-list