TI-2014-05135 CVE-2014-6237 · GHSA-x75m-gm56-2g6cCross-site scripting (XSS) vulnerability in the News Pack extension 0.1.0 and earlier for…Priority LOW 19Cross-site scripting (XSS) vulnerability in the News Pack extension 0.1.0 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.00936 · Published 2014-09-11 · No fix listed CWE-79