Cross-site Scripting Issue in TYPO3 Content Rating Extbase Extension
CVE-2015-1404

Currently unrated

Key Information:

Vendor

Content Rating Extbase Project

Status
Content Rating Extbase
Vendor
CVE Published:
3 February 2015

What is CVE-2015-1404?

The Content Rating Extbase extension for TYPO3 prior to version 2.0.4 contains a cross-site scripting (XSS) vulnerability. This allows remote attackers to inject arbitrary web scripts or HTML content, leading to potential data theft or manipulation. The vulnerability arises from unspecified vectors, requiring users to promptly update to the latest version to mitigate risks associated with exploitation.

References

http://www.securityfocus.com/bid/71985
vdb-entryx_refsource_BID
http://www.openwall.com/lists/oss-security/2015/01/11/7
mailing-listx_refsource_MLIST
http://typo3.org/teams/security/security-bulletins/typo3-...
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.