PT-2013-5649

Name of the Vulnerable Software and Affected Versions TYPO3 Javascript and CSS Optimizer extension versions prior to 1.1.14 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 1.1.14, update t...

CVE-2013-5570: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Javascript and CSS Optimizer extension before 1.1.14 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...