CVE-2017-5962

CVE-2017-5962 affects contexts_wurfl (TYPO3) before 0.4.2. The flaw stems from insufficient filtering of user data in the force_ua parameter sent to /contexts_wurfl/Library/wurfl-dbapi-1.4.4.0/check_wurfl.php, allowing arbitrary HTML/JavaScript to be executed in the victim’s browser. Impact is us...