Description
Cross-site scripting (XSS) vulnerability in the News Pack extension 0.1.0 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Unscored
CVE-2014-6237
EUVD-2014-6123GHSA-x75m-gm56-2g6c
Cross-site scripting (XSS) vulnerability in the News Pack extension 0.1.0 and earlier for TYPO3 allows remote authenticated users to inject…
Published Sep 11, 2014 · Updated Aug 6, 2024 · Assigned by mitre