XSS in Jo Hasenau Gridelements

CVE-2014-3949

Cross-site scripting (XSS) vulnerability in the layout wizard in the Grid Elements (gridelements) extension before 1.5.1 and 2.0.x before 2.0.3 for TYPO3 allows remote authenticated backend users to inject arbitrary web script or HTML via unspecified vectors.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.009 (57.5th percentile) — read the EPSS interpretation.

Affected products

Jo_hasenau Gridelements — versions 0.1.0, 0.2.0, 0.3.0
Typo3
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (mailing-list, x_refsource_MLIST)