13 matches found
CVE-2022-33157
The libconnect extension before 7.0.8 and 8.x before 8.1.0 for TYPO3 allows XSS...
EUVD-2022-6314
Malicious code in bioql PyPI...
Cross-site Scripting (XSS)
subhh/libconnect is vulnerable to cross-site scriptingXSS attacks. The library does not properly encode the user input in displayParticipantsFormAction function, allowing an attacker to inject and execute malicious javascript on the target system...
GHSA-C8F2-5H29-8J2H libconnect Extension for Typo3 Vulnerable to XSS
The libconnect extension before 7.0.8 and 8.x before 8.1.0 for TYPO3 allows XSS...
libconnect Extension for Typo3 Vulnerable to XSS
The libconnect extension before 7.0.8 and 8.x before 8.1.0 for TYPO3 allows XSS...
CVE-2022-33157
The libconnect extension before 7.0.8 and 8.x before 8.1.0 for TYPO3 allows XSS...
CVE-2022-33157
The libconnect extension before 7.0.8 and 8.x before 8.1.0 for TYPO3 allows XSS...
CVE-2022-33157
The libconnect extension before 7.0.8 and 8.x before 8.1.0 for TYPO3 allows XSS...
Cross site scripting
The libconnect extension before 7.0.8 and 8.x before 8.1.0 for TYPO3 allows XSS...
CVE-2022-33157
The libconnect extension before 7.0.8 and 8.x before 8.1.0 for TYPO3 allows XSS...
CVE-2022-33157
CVE-2022-33157 affects the TYPO3 libconnect extension: versions before 7.0.8 and 8.x before 8.1.0 are vulnerable to cross-site scripting (XSS) due to improper input handling in the library (e.g., displayParticipantsFormAction). The impact is attacker-controlled script execution in the victim’s br...
TYPO3 跨站脚本漏洞
TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland. A security vulnerability exists in TYPO3. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement. The...
Cross-Site Scripting in extension "libconnect" (libconnect)
The extension fails to properly encode user input for output in HTML context...