CVE-2013-5100

The CVE documents a Cross-site Scripting (XSS) vulnerability in the Static Methods since 2007 (div2007) extension for TYPO3 . The issue affects the extension version prior to 0.10.2 and is related to the function t3lib_div::quoteJSvalue , enabling remote attackers to inject arbitrary script/HTML ...