Cross-site Scripting (XSS)

typo3/cms-filelist is vulnerable to cross-site scripting XSS attacks. This attack is possible due to lack of sanitization in thefileext field in the formatFileList function of FileLlist.php, allowing an attacker to inject the malicious script, and execute the scripts when a user visit the page an...