Cross-site Scripting (XSS)

Typo3 CMS is vulnerable to cross-site scripting XSS attacks. The library's flashplayer does not validate flash and image files, allowing a malicious user to embed an external flash video to inject and execute arbitrary script...