Description
Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 before 6.2.3 allow remote authenticated editors to inject arbitrary web script or HTML via unknown parameters.
Remediation
References
Related Vulnerabilities
MySQL CVE-2014-6505 Vulnerability (CVE-2014-6505)
Oracle JRE CVE-2013-0426 Vulnerability (CVE-2013-0426)
WordPress Plugin Calendar Event Multi View Cross-Site Scripting (1.3.99)
WordPress Plugin Twitch Player Cross-Site Scripting (2.1.0)
Apache Tomcat Improper Input Validation Vulnerability (CVE-2016-6816)