CVE-2012-6147

CVE-2012-6147 is an XSS vulnerability in TYPO3’s Backend API (tree render API, TCA-Tree). The issue allows remote authenticated backend users to inject arbitrary web script or HTML via unspecified vectors. Affected TYPO3 core versions are 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before...