GHSA-mqhg-c7w9-w3cvLow

WEC Map (wec_map) extension for TYPO3 allows Cross-site Scripting

Published
May 17, 2022
Last Modified
April 14, 2025

🔗 CVE IDs covered (1)

CVE-2014-6296 →

📋 Description

Cross-site scripting (XSS) vulnerability in the WEC Map (wec_map) extension before 3.0.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

🎯 Affected products2

  • composer/web-tp3/wec_map:< 3.0.3
  • composer/jbartels/wec-map:< 3.0.3

🔗 References (4)