Vulnerability Database

With exploit

Composer icon typo3 / cms

Title Severity Exploit Date Affected Version
Typo3 Arbitrary File Disclosure in Form Component Medium Jun 4, 2024 >= 6.2.0 < 6.2.20
Cross-Site Scripting (XSS) in TYPO3 component CSS styled content Medium Jun 4, 2024 >= 6.2.0 < 6.2.19
>= 7.6.0 < 7.6.4
XML External Entity (XXE) Processing in TYPO3 Core High Jun 4, 2024 >= 6.2.0 < 6.2.19
>= 7.6.0 < 7.6.4
Cross-Site Scripting (XSS) in TYPO3 component Backend Medium Jun 4, 2024 >= 6.2.0 < 6.2.19
TYPO3 Cross-Site Scripting (XSS) in form component Medium Jun 3, 2024 >= 6.2.0 < 6.2.18
TYPO3 Cross-Site Scripting in legacy form component Medium Jun 3, 2024 >= 6.2.0 < 6.2.18
TYPO3 Cross-Site Scripting in link validator component Medium Jun 3, 2024 >= 6.2.0 < 6.2.18
>= 7.6.0 < 7.6.3
TYPO3 Multiple Cross-Site Scripting vulnerabilities in frontend Medium Jun 3, 2024 >= 6.2.0 < 6.2.16
>= 7.0.0 < 7.6.1
TYPO3 SQL Injection in dbal High Jun 3, 2024 >= 6.2.0 < 6.2.18
Cross-Site Scripting in TYPO3 component Indexed Search Medium Jun 3, 2024 >= 6.2.0 < 6.2.16