Vulnerabilities

TI-2014-05177 CVE-2014-6296 · GHSA-mqhg-c7w9-w3cv

Cross-site scripting (XSS) vulnerability in the WEC Map (wec_map) extension before 3.0.3…

LOW 22

Cross-site scripting (XSS) vulnerability in the WEC Map (wec_map) extension before 3.0.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00931 Published 2014-10-03 Fixed in 3.0.3 CWE-79

TI-2014-05176 CVE-2014-6295 · GHSA-f3v6-g4mv-pjhq

SQL injection vulnerability in the WEC Map (wec_map) extension before 3.0.3 for TYPO3…

LOW 35

SQL injection vulnerability in the WEC Map (wec_map) extension before 3.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01164 Published 2014-10-03 Fixed in 3.0.3 CWE-89

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in the WEC Map (wec_map) extension before 3.0.3…

SQL injection vulnerability in the WEC Map (wec_map) extension before 3.0.3 for TYPO3…