CVE-2008-6144: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the WEC Discussion Forum (wecdiscussion) extension 1.7.0 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-3029.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2008-6144?
CVE-2008-6144 has been classified as a moderate severity vulnerability due to the potential for cross-site scripting attacks.
How do I fix CVE-2008-6144?
To fix CVE-2008-6144, upgrade the WEC Discussion Forum extension to version 1.7.1 or later.
What types of attacks are associated with CVE-2008-6144?
CVE-2008-6144 allows remote attackers to perform cross-site scripting attacks by injecting arbitrary web scripts or HTML.
Which versions of TYPO3 are affected by CVE-2008-6144?
CVE-2008-6144 affects versions of the WEC Discussion Forum extension up to and including 1.7.0.
Can CVE-2008-6144 be exploited without authentication?
Yes, CVE-2008-6144 can be exploited by unauthenticated remote attackers.