Description

The t3lib_div::RemoveXSS API method in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism and inject arbitrary web script or HTML via non printable characters.

Remediation

References

CVE-2012-1608

Related Vulnerabilities

WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker Multiple Vulnerabilities (7.3.10)

WordPress Plugin WF Cookie Consent Cross-Site Scripting (1.1.3)

Moodle Other Vulnerability (CVE-2006-0147)

WordPress Plugin WP-DBManager Arbitrary File Deletion (2.79.1)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-34911)

Severity

Medium

Classification

CVE-2012-1608 CWE-20

Tags

Missing Update Known Vulnerabilities