Cross Site Scripting (XSS)

typo3/html-sanitizer is vulnerable to Cross-site Scripting (XSS). The vulnerability allows an attacker to inject malicious code into a vulnerable TYPO3 website through bypassing the cross-site scripting prevention mechanisms via crafting a specially crafted URL or form submission. The malicious code would then be executed by other users who view the URL or submit the form on the vulnerable website.