CVE-2014-3758: Cross-site scripting (XSS) vulnerability in the BibTex Publications (si_bibtex) extension 0.2.3 for TYPO3 a...

Security readout for executives and security teams

CVE-2014-3758 is a cross-site scripting issue in the TYPO3 BibTex Publications extension, si_bibtex 0.2.3. A remote attacker may be able to inject script or HTML through import-related functionality. The bundle does not provide CVSS scoring, named patches, or evidence of active exploitation. Exposure appears limited to TYPO3 sites running the third-party si_bibtex extension version 0.2.3, especially where import functionality is enabled or reachable by untrusted users. The source bundle does not identify other affected versions or products. Prioritize if the organization runs TYPO3 with si_bibtex 0.2.3, because persistent XSS can affect users who view stored content. If the extension is absent, urgency is low. Lack of scoring and patch details means validation should precede broad emergency action. Mitigation focus: Inventory TYPO3 deployments for the si_bibtex extension and version 0.2.3.; Check TYPO3 extension and vendor guidance for fixed releases or official mitigation.; Disable or remove si_bibtex where it is not business-required..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.