CVE-2012-6148

TYPO3 Core CVE-2012-6148 is an XSS in the function menu API. Affected: TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6. Attack vector via the backend with remote authenticated access; arbitrary script/HTML can be injected through unspecified vectors. Remediation: update to ...