CVE-2020-15514

The jhcaptcha extension through 2.1.3, and 3.x through 3.0.2, for TYPO3 allows XSS...

CVE-2020-15514

The CVE-2020-15514 entry concerns the jh_captcha extension for TYPO3 (versions up to 2.1.3 and up to 3.0.2) that allows cross-site scripting (XSS) due to improper encoding of user input in HTML. Affected component is the TYPO3 jh_captcha extension; root cause is lack of proper output encoding for...