LOW

GHSA-mqhg-c7w9-w3cv

WEC Map (wec_map) extension for TYPO3 allows Cross-site Scripting

Quick fix

GHSA-mqhg-c7w9-w3cv — web-tp3/wec_map: upgrade to the fixed version with the command below.

composer require web-tp3/wec_map:^3.0.3

Details

Cross-site scripting (XSS) vulnerability in the WEC Map (wec_map) extension before 3.0.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/web-tp3/wec_map

Introduced in: 0Fixed in: 3.0.3

Fixcomposer require web-tp3/wec_map:^3.0.3

Packagist/jbartels/wec-map

Introduced in: 0Fixed in: 3.0.3

Fixcomposer require jbartels/wec-map:^3.0.3

References

https://nvd.nist.gov/vuln/detail/CVE-2014-6296[ADVISORY]
https://typo3.org/security/advisory/typo3-ext-sa-2014-002[WEB]
http://typo3.org/extensions/repository/view/wec_map[WEB]