Cross-Site Scripting (XSS)

typo3/cms is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization of user input in the AbstractTagBasedViewHelper function in CssViewHelper.php, allowing an attacker to inject and execute malicious code on the host machine...