Description
Incomplete blacklist vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote attackers to conduct cross-site scripting (XSS) attacks via certain HTML5 JavaScript events.
Remediation
References
Related Vulnerabilities
WordPress Plugin Jekyll Exporter Remote Code Execution (2.2.0)
PostgreSQL Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2005-0227)
Drupal Core 9.4.x Cross-Site Scripting (9.4.0 - 9.4.2)
Oracle Database Server Other Vulnerability (CVE-2001-1041)
Magento Improper Authentication Vulnerability (CVE-2019-8108)