Typo3 4.0.2

[Typo3]

Typo3 version 4.0.2 has been made available to fix a medium severity Cross-Site-Scripting (XSS) problem discovered in the Indexed Search component.

The search word was not escaped correctly so a prepared URL (e.g. referenced in an email) could potentially contain some unwanted JavaScript code.

To learn more, please read the release announcement.

Related

Stats for Typo3

Links