CVE-2014-6234

MEDIUM 4.3CVE-2014-6234 · Published 11/09/2014 · updated 17/06/2026

In short

CVE-2014-6234 is a MEDIUM (CVSS 4.3) vulnerability affecting open graph protocol (open graph protocol project).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
open graph protocol open_graph_protocol_project	`≤ 1.0.1`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the Open Graph protocol (jh_opengraphprotocol) extension before 1.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

secunia.com/advisories/60874
typo3.org/extensions/repository/view/jh_opengraphprotocol · Patch
typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-010 · Patch
securityfocus.com/bid/69566
exchange.xforce.ibmcloud.com/vulnerabilities/95704

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free