Several vulnerabilities in third party extensions

Several vulnerabilities found in third-party TYPO3 extensions. Affected extensions include attacalendar, attacpetition, eu_subscribe, exinit_job_offer, fefilebrowser, js_css_optimizer, kk_csv2table, lonewsseo, mn_mysql2json, news_search, tipafriend_plus, twitter_auth, sofortueberweisung2commerce, sys_messages. Critical vulnerabilities such as SQL Injection, Mail Header Injection and Cross-Site-Scripting have been reported. Some vulnerabilities are known to be exploited in the wild