Description

Incomplete blacklist vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote attackers to conduct cross-site scripting (XSS) attacks via certain HTML5 JavaScript events.

Remediation

References

CVE-2012-3530

Related Vulnerabilities

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-42046)

OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-0206)

Oracle JRE CVE-2022-21294 Vulnerability (CVE-2022-21294)

Oracle Database Server CVE-2012-0552 Vulnerability (CVE-2012-0552)

WordPress Plugin Slider Hero with Animation, Video Background SQL Injection (8.2.6)

Severity

Medium

Classification

CVE-2012-3530

Tags

Missing Update Known Vulnerabilities