CVE
- Id
- 74500
- CVE No.
- CVE-2014-7200
- Status
- Candidate
- Description
- Cross-site scripting (XSS) vulnerability in pi1/class.tx_dmmjobcontrol_pi1.php in the JobControl (dmmjobcontrol) extension 2.14.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via the tx_dmmjobcontrol_pi1[search][keyword] parameter to jobs/.
- Phase
- Assigned (20140926)
- Votes
- None (candidate not yet proposed)
- Comments