Martin Sonnek

Name of the Vulnerable Software and Affected Versions: TYPO3 sr feuser register extension versions 1.4.0, 1.6.0, 2.2.1 through 2.2.7, 2.3.0 through 2.3.6, 2.4.0, 2.5.0 through 2.5.9 Description: The issue is related to a cross-site scripting (XSS) vulnerability. This allows remote attackers to inject arbitrary web script or HTML. Recommendations: For versions 1.4.0, 1.6.0, 2.2.1 through 2.2.7, 2.3.0 through 2.3.6, 2.4.0, 2.5.0 through 2.5.9, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: sr feuser register versions 1.4.0, 1.6.0, 2.2.1 through 2.2.7, 2.3.0 through 2.3.6, 2.4.0, 2.5.0 through 2.5.9 Description: The issue allows remote attackers to execute arbitrary code and delete arbitrary files via unspecified attack vectors. Recommendations: For versions 1.4.0, 1.6.0, 2.2.1 through 2.2.7, 2.3.0 through 2.3.6, 2.4.0, 2.5.0 through 2.5.9, at the moment, there is no information about a newer version that contains a fix for this vulnerability.