Component Type: Third party extension. This extension is not part of the TYPO3 default installation
Affected Versions: Version 0.0.7 and all versions below
Vulnerability Type: Cross Site Scripting
Solution: An updated version is available from the TYPO3 extension manager and at
General advice: Follow the recommendations that are given in the <media 800 - external-link-new-window>TYPO3 Security Cookbook</media>.
Keep notice of the TYPO3 security bulletin page at typo3.org/teams/security/security-bulletins/.
Credits: Credits go to security team member Ekkehard GÃ¼mbel, who discovered the issue and author Markus Lange, who made a fixed version available.