Cross-site Scripting (XSS)

Typo3 CMS is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary web script when installing the TER extension by passing a json request to the application...