Cross-Site Scripting (XSS)

typo3fluid/fluid is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript in a user's browser via conditional operator in templates such as showFullName ? fullName : defaultValue...