WEC Map (wec_map) extension for TYPO3 allows Cross-site Scripting

MOYENNE 4.3CVE-2014-6296 · GHSA-mqhg-c7w9-w3cv · Published 03/10/2014 · updated 17/06/2026

En bref

CVE-2014-6296 est une vulnérabilité MOYENNE (CVSS 4.3) touchant jbartels/wec-map, web-tp3/wec_map, wec map (wec map project).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.93%, plus élevée que 60.8% des vulnérabilités.
Correctif : mettre à jour vers 3.0.3 ou plus récent.

Package	Affected versions	Patched versions
jbartels/wec-map Packagist	`< 3.0.3`	`3.0.3`
web-tp3/wec_map Packagist	`< 3.0.3`	`3.0.3`
wec map wec_map_project	`= 3.0.0= 3.0.1≤ 3.0.2`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the WEC Map (wec_map) extension before 3.0.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

NVD description

Cross-site scripting (XSS) vulnerability in the WEC Map (wec_map) extension before 3.0.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

nvd.nist.gov/vuln/detail/CVE-2014-6296 · ADVISORY
typo3.org/security/advisory/typo3-ext-sa-2014-002 · WEB
typo3.org/extensions/repository/view/wec_map · WEB
typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-002 · Patch

Autres vulnérabilités de jbartels/wec-map

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free