Secunia Security Advisory – Some vulnerabilities have been reported in the WEC Discussion Forum (wec_discussion) extension for TYPO3, which can be exploited by malicious people to conduct SQL injection and cross-site scripting attacks.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/73249/sa33254.txt
Source: https://packetstormsecurity.com/files/73249/Secunia-Security-Advisory-33254.html