Description

Incomplete blacklist vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote attackers to conduct cross-site scripting (XSS) attacks via certain HTML5 JavaScript events.

Remediation

References

CVE-2012-3530

Related Vulnerabilities

WordPress Plugin Custom Login Cross-Site Scripting (3.2)

WordPress Plugin Better WordPress reCAPTCHA (with no CAPTCHA reCAPTCHA) Cross-Site Scripting (2.0.3)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2013-2110)

WordPress Plugin iThemes Security (formerly Better WP Security) Cross-Site Scripting (5.3.4)

TYPO3 Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-6146)

Severity

Medium

Classification

CVE-2012-3530

Tags

Missing Update Known Vulnerabilities