CVE-2015-4608: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the BE User Log bekobeuserlog extension 1.1.1 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...