CVE-2014-3949

no score yetEPSS 0.9%

Cross-site scripting (XSS) vulnerability in the layout wizard in the Grid Elements (gridelements) extension before 1.5.1 and 2.0.x before 2.0.3 for TYPO3 allows remote authenticated backend users to inject arbitrary web script or HTML via unspecified vectors.

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2014-06-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

jo_hasenau:gridelements

References

http://secunia.com/advisories/58592
http://typo3.org/extensions/repository/view/gridelements
http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-008
http://www.openwall.com/lists/oss-security/2014/06/03/3
http://secunia.com/advisories/58592

Check your stack JSON