Typo3 · Typo3 · CVE-2012-3528
**Name of the Vulnerable Software and Affected Versions**
TYPO3 versions 4.5.x through 4.5.18
TYPO3 versions 4.6.x through 4.6.11
TYPO3 versions 4.7.x through 4.7.3
**Description**
The issue allows remote authenticated backend users to inject arbitrary web script or HTML. This can be achieved via unspecified vectors in the backend of the software.
**Recommendations**
For TYPO3 versions 4.5.x through 4.5.18, update to version 4.5.19 or later.
For TYPO3 versions 4.6.x through 4.6.11, update to version 4.6.12 or later.
For TYPO3 versions 4.7.x through 4.7.3, update to version 4.7.4 or later.