TYPO3 Improper Input Validation Vulnerability - CVE-2012-1608 - Vulnerability Database

TYPO3 Improper Input Validation Vulnerability - CVE-2012-1608

Medium

Reference: CVE-2012-1608

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2012-1608

Title: TYPO3 Improper Input Validation Vulnerability

Overview:

The t3lib_div::RemoveXSS API method in TYPO3 4.4.0 through 4.4.13 4.5.0 through 4.5.13 4.6.0 through 4.6.6 4.7 and 6.0 allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism and inject arbitrary web script or HTML via non printable characters.