Wec Map

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-6296 PHP MEDIUM PATCH This Month

Cross-site scripting (XSS) vulnerability in the WEC Map (wec_map) extension before 3.0.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

XSS Wec Map

NVD

CVSS 2.0

4.3

EPSS

0.3%

CVE-2014-6295 PHP HIGH PATCH This Week

SQL injection vulnerability in the WEC Map (wec_map) extension before 3.0.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.

SQLi Wec Map

NVD

CVSS 2.0

7.5

EPSS

0.4%

CVE-2014-6296 PHP

EPSS 0% CVSS 4.3

MEDIUM PATCH This Month

XSS Wec Map

NVD

CVE-2014-6295 PHP

EPSS 0% CVSS 7.5

HIGH PATCH This Week

SQLi Wec Map

NVD