Severity
Severity not reported.
Affected versions
typo3/cms Packagist
All typo3/cms advisories →| Affected | Fixed in |
|---|---|
4.5 to before 4.5.19 | 4.5.19Advisories → |
4.6 to before 4.6.12 | 4.6.12Advisories → |
4.7 to before 4.7.4 | 4.7.4Advisories → |
Description
Incomplete blacklist vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote attackers to conduct cross-site scripting (XSS) attacks via certain HTML5 JavaScript events.