Cross-Site Scripting Vulnerability in TYPO3 Content Rating Extension
CVE-2015-1402

Currently unrated

Key Information:

Vendor

Content Rating Project

Status
Content Rating
Vendor
CVE Published:
3 February 2015

What is CVE-2015-1402?

A cross-site scripting (XSS) vulnerability exists in the Content Rating extension for TYPO3, enabling remote attackers to inject arbitrary web script or HTML content. This security flaw can be exploited through various undefined vectors, posing risks to user data and website integrity. Users of affected versions are urged to apply necessary updates to safeguard against potential exploits.

References

http://www.securityfocus.com/bid/71984
vdb-entryx_refsource_BID
http://www.openwall.com/lists/oss-security/2015/01/11/7
mailing-listx_refsource_MLIST
http://typo3.org/teams/security/security-bulletins/typo3-...
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.