Typo3 · Typo3 · CVE-2012-6147
**Name of the Vulnerable Software and Affected Versions**
TYPO3 versions 4.5.x through 4.5.20
TYPO3 versions 4.6.x through 4.6.13
TYPO3 versions 4.7.x through 4.7.5
**Description**
A cross-site scripting (XSS) issue exists in the tree render API (TCA-Tree) in the Backend API, allowing remote authenticated backend users to inject arbitrary web script or HTML.
**Recommendations**
For TYPO3 versions 4.5.x through 4.5.20, update to version 4.5.21 or later.
For TYPO3 versions 4.6.x through 4.6.13, update to version 4.6.14 or later.
For TYPO3 versions 4.7.x through 4.7.5, update to version 4.7.6 or later.