Extension "Event management and registration" vulnerabilities
1 known vulnerability in Extension "Event management and registration" from TYPO3. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.7average CVSS score
Latest first
- 7.7 High severity
Extension "Event management and registration": Improper Neutralization of Special Elements Used in a Template Engine
The extension passes an editor-configurable email subject string directly into a Fluid template source without restriction. A backend user with edit access to the event plugin or Backend Module can supply Fluid ViewHelper syntax in this field to disclose sensi