PT-2012-3069

Name of the Vulnerable Software and Affected Versions Yet another Google search ya googlesearch extension versions prior to 0.3.10 for TYPO3 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can...

CVE-2012-1081: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Yet another Google search yagooglesearch extension before 0.3.10 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...