CVE-2014-6234: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Open Graph protocol jhopengraphprotocol extension before 1.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Several vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third-party TYPO3 extensions: cwtfeedit, euldap, flatmgr, jhopengraphprotocol, kedompdf, lumophpinclude, newspack, sbakronymmanager, staddressma, weeaargooglesitemap,. wtdirectory Release Date: September 02, 2014 Bulletin update: September ...