CVE-2009-2104

The CVE-2009-2104 entry describes a Cross-site scripting (XSS) vulnerability in the Modern Guestbook / Commenting System (ve_guestbook) extension for TYPO3, affecting version 2.7.1 and earlier. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vector...

Multiple vulnerabilities in extension ve_guestbook

It has been discovered that the extension veguestbook is vulnerable to SQL Injection attacks. Also, a Cross Site Scripting issue has been detected. Component Type: Third party extension. This extension is not part of the TYPO3 default installation. Affected Versions: Version 1.9.3 and below...