CVE-2012-6148

Name of the Vulnerable Software and Affected Versions TYPO3 versions 4.5.x through 4.5.20 TYPO3 versions 4.6.x through 4.6.13 TYPO3 versions 4.7.x through 4.7.5

Description A cross-site scripting (XSS) issue exists in the function menu API, allowing remote authenticated backend users to inject arbitrary web script or HTML.

Recommendations For versions 4.5.x through 4.5.20, update to version 4.5.21 or later. For versions 4.6.x through 4.6.13, update to version 4.6.14 or later. For versions 4.7.x through 4.7.5, update to version 4.7.6 or later.