Cross-site Scripting (XSS)

Overview web-tp3/wecmap is a WEC Google Maps. Affected versions of this package are vulnerable to Cross-site Scripting XSS via unspecified vectors. An attacker can inject arbitrary web script or HTML by crafting malicious input. Details Cross-site scripting or XSS is a code vulnerability that...

SQL Injection

Overview web-tp3/wecmap is a WEC Google Maps. Affected versions of this package are vulnerable to SQL Injection through unspecified vectors. An attacker can execute arbitrary SQL commands by injecting malicious SQL code. Remediation Upgrade web-tp3/wecmap to version 3.3.0 or higher. References -...

CVE-2014-6295

SQL injection vulnerability in the WEC Map wecmap extension before 3.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...