Skip to content
OpenAdvisories
Low CVE-2014-6296 EUVD-2014-6181GHSA-mqhg-c7w9-w3cv

WEC Map (wec_map) extension for TYPO3 allows Cross-site Scripting

Published Oct 3, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Package: jbartels/wec-map Package: web-tp3/wec_map Ecosystem: Packagist

Description

Cross-site scripting (XSS) vulnerability in the WEC Map (wec_map) extension before 3.0.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist jbartels/wec-map < 3.0.3 3.0.3 GHSA-mqhg-c7w9-w3cv
Packagist web-tp3/wec_map < 3.0.3 3.0.3 GHSA-mqhg-c7w9-w3cv

References