CVE-2014-6237

Cross-site scripting XSS vulnerability in the News Pack extension 0.1.0 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the News Pack extension 0.1.0 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6237

Cross-site scripting XSS vulnerability in the News Pack extension 0.1.0 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6237

CVE-2014-6237 is an XSS vulnerability in the News Pack extension (0.1.0 and earlier) for TYPO3, allowing remote authenticated users to inject arbitrary scripts via unspecified vectors. The connected TYPO3 security bulletin confirms that versions known to be vulnerable will no longer be available ...

PT-2014-7110

Name of the Vulnerable Software and Affected Versions News Pack extension versions 0.1.0 and earlier for TYPO3 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote authenticated users to inject arbitrary web script or HTML. This can be achieved via...

CVE-2014-6237: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the News Pack extension 0.1.0 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...