Description

Incomplete blacklist vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote attackers to conduct cross-site scripting (XSS) attacks via certain HTML5 JavaScript events.

Remediation

References

CVE-2012-3530

Related Vulnerabilities

WebLogic CVE-2018-2933 Vulnerability (CVE-2018-2933)

WordPress 3.8.x PHP Object Injection (3.8 - 3.8.35)

Prototype CVE-2020-27511 Vulnerability (CVE-2020-27511)

WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple Cross-Site Scripting Vulnerabilities (2.1.9)

WordPress Plugin Alpine PhotoTile for Instagram Cross-Site Scripting (1.2.7.7)

Severity

Medium

Classification

CVE-2012-3530

Tags

Missing Update Known Vulnerabilities