Cross-Site Scripting in 3rd party library Flowplayer

[RSS Bot]

It has been discovered, that editors could change, create or delete metadata of files without permission.

More... (http://www.typo3.org/news/article/cross-site-scripting-in-3rd-party-library-flowplayer/)