MEDIUM6.1npmPackagist
GHSA-g68x-vvqq-pvw3· CVE-2018-17960Ckeditor XSS Vulnerability
Modified: 2/16/2024
package
Packagist/typo3/cms
pkg:packagist/typo3/cms
MEDIUM5.3Packagist
GHSA-vpr3-rc99-2wprInformation Disclosure in TYPO3 Backend
Modified: 12/2/2024
MEDIUM6.1Packagist
GHSA-vqqx-jw6p-q3rf· BIT-typo3-2020-26227, CVE-2020-26227Cross-Site Scripting in Fluid view helpers
Modified: 9/10/2026
HIGH7.1Packagist
GHSA-w2fr-65vp-mxw3· CVE-2019-10912Deserialization of untrusted data in Symfony
Modified: 3/13/2024
MEDIUMPackagist
GHSA-w3v6-r62r-fvqh· CVE-2012-1608Typo3 API XSS Vulnerabilities
Modified: 11/8/2023
LOWPackagist
GHSA-w563-rq37-cvq5· CVE-2012-6145Typo3 Backend History Module Vulnerable to XSS
Modified: 1/12/2024
HIGHPackagist
GHSA-w736-qv86-vq94· CVE-2010-3714TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism
Modified: 2/8/2024
MEDIUMPackagist
GHSA-259v-xm34-p7frTypo3 Cross-Site Scripting in Language Pack Handling
Modified: 12/2/2024
MEDIUM5.4Packagist
GHSA-29wr-24h5-95r5· CVE-2011-4630Typo3 XSS Vulnerability
Modified: 1/12/2024
MEDIUMPackagist
GHSA-2hp4-8h6h-93rr· CVE-2012-6146Typo3 Backend History Module Vulnerable to XSS
Modified: 1/12/2024
HIGH8.6Packagist
GHSA-2r6j-862c-m2v2· BIT-typo3-2021-21355, CVE-2021-21355Unrestricted File Upload in Form Framework
Modified: 7/8/2026
MEDIUM5.4Packagist
GHSA-2rcw-9hrm-8q7qTYPO3 Cross-Site Scripting in Frontend User Login
Modified: 12/4/2024
HIGH8.7Packagist
GHSA-2rxh-h6h9-qrqc· BIT-typo3-2020-11066, CVE-2020-11066Class destructors causing side-effects when being unserialized in TYPO3 CMS
Modified: 9/10/2026
HIGH8.8Packagist
GHSA-2wj9-434x-9hvp· BIT-typo3-2020-11067, CVE-2020-11067Insecure Deserialization in Backend User Settings in TYPO3 CMS
Modified: 9/10/2026
LOW3.7Packagist
GHSA-347x-877p-hcwx· BIT-typo3-2020-11063, CVE-2020-11063Information Disclosure in Password Reset
Modified: 9/10/2026
MEDIUM5.3Packagist
GHSA-34fr-fhqr-7235· BIT-typo3-2021-32767, CVE-2021-32767Information Disclosure in User Authentication
Modified: 7/8/2026
MEDIUM6.1Packagist
GHSA-3f58-74qw-ph75· CVE-2015-8760TYPO3 allows remote attackers to embed Flash videos from external domain
Modified: 4/14/2025
MEDIUMPackagist
GHSA-3jxq-5xhh-9jr3Cross-Site Scripting (XSS) in TYPO3 component Backend
Modified: 12/1/2024
MEDIUM5.4Packagist
GHSA-3r95-23jp-mhvg· BIT-typo3-2022-31048, CVE-2022-31048Cross-Site Scripting in TYPO3's Form Framework
Modified: 12/6/2023
HIGH8.3Packagist
GHSA-3vg7-jw9m-pc3f· BIT-typo3-2021-21357, CVE-2021-21357Broken Access Control in Form Framework
Modified: 7/8/2026
MEDIUM4.8Packagist
GHSA-3w22-wrwx-2r75· CVE-2018-6905Typo3 XSS Vulnerability
Modified: 2/16/2024
HIGH7.5Packagist
GHSA-3w4h-r27h-4r2w· CVE-2019-11832TYPO3 Image Processing susceptible to Code Execution
Modified: 2/20/2024
HIGH8.1Packagist
GHSA-3x94-fv5h-5q2c· BIT-typo3-2020-15099, CVE-2020-15099Exposure of Sensitive Information to an Unauthorized Actor in TYPO3 CMS
Modified: 7/8/2026
MEDIUM5.4Packagist
GHSA-43gj-mj2w-wh46· BIT-typo3-2020-11064, CVE-2020-11064Cross-Site Scripting in TYPO3 CMS Form Engine
Modified: 7/8/2026
HIGH8.1Packagist
GHSA-45xg-4w5x-j429TYPO3 Arbitrary Shell Execution in Swiftmailer library
Modified: 12/6/2024
MEDIUM6.1Packagist
GHSA-47m6-46mj-p235· CVE-2022-36020TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection
Modified: 11/8/2023
MEDIUM6.3Packagist
GHSA-47ww-mq32-g4xw· CVE-2013-7075TYPO3 vulnerable to Insecure Unserialize via Content Editing Wizards component
Modified: 11/8/2023
MEDIUM6.1Packagist
GHSA-4h5c-5g25-v7fhTYPO3 Cross-Site Scripting in Form Framework
Modified: 12/4/2024
HIGHPackagist
GHSA-4h9j-f98m-p4hg· CVE-2010-1153TYPO3 PHP remote file inclusion vulnerability
Modified: 4/11/2025
MEDIUM5.4Packagist
GHSA-4j77-gg36-9864· BIT-typo3-2020-11065, CVE-2020-11065Cross-Site Scripting in TYPO3 CMS Link Handling
Modified: 7/8/2026
MEDIUM6.1Packagist
GHSA-4jhw-2p6j-5wmp· BIT-typo3-2021-21338, CVE-2021-21338Open Redirection in Login Handling
Modified: 7/8/2026
MEDIUM5.9Packagist
GHSA-4p9g-qgx9-397p· BIT-typo3-2021-21359, CVE-2021-21359Denial of Service in Page Error Handling
Modified: 7/8/2026
HIGH8.8Packagist
GHSA-4r76-xr68-w7m7TYPO3 may allow editors to change, create, or delete metadata of files not within their file mounts
Modified: 12/5/2024
MEDIUM6.5Packagist
GHSA-4rpv-g4gq-rh4m· CVE-2013-7073TYPO3 vulnerable to Information Disclosure via Content Editing Wizards component
Modified: 11/8/2023
CRITICAL9.8Packagist
GHSA-53mm-hx32-6475· CVE-2022-47406TYPO3 vulnerable to Insufficient Session Expiration
Modified: 11/8/2023
HIGHPackagist
GHSA-5479-gqqr-f9gj· CVE-2014-9509Typo3 Vulnerable to Cache Poisoning
Modified: 11/29/2024
HIGHPackagist
GHSA-54jj-pxx2-pv8h· CVE-2013-4250TYPO3 doesn't properly check file extensions
Modified: 4/14/2025
HIGHPackagist
GHSA-55g3-fjwm-w2c8· CVE-2014-3942TYPO3 Color Picker Wizard component allows remote authenticated editors to execute arbitrary PHP code
Modified: 4/14/2025
MEDIUM5.4Packagist
GHSA-56f9-5563-m2h7· CVE-2015-8755Typo3 XSS Vulnerability
Modified: 2/20/2024
MEDIUMPackagist
GHSA-594h-cx6w-p4jf· CVE-2014-3941Typo3 Host Header Spoofing Vulnerability
Modified: 4/14/2025
MEDIUM5.4Packagist
GHSA-5959-4x58-r8c2· BIT-typo3-2022-36106, CVE-2022-36106TYPO3 CMS missing check for expiration time of password reset token for backend users
Modified: 12/6/2023
MEDIUM5.5Packagist
GHSA-59pj-7mjh-4465· CVE-2019-19850TYPO3 SQL Injection in low-level Query Generator
Modified: 12/8/2024
MEDIUMPackagist
GHSA-5cxf-xx9j-54jcMultiple Cross-Site Scripting vulnerabilities in TYPO3 backend
Modified: 11/29/2024
MEDIUM6.5Packagist
GHSA-5gr6-97fv-52ccCross-Site Scripting in TYPO3 CMS
Modified: 12/2/2024
MEDIUMPackagist
GHSA-5j86-5xvg-7q93TYPO3 Cross-Site Scripting (XSS) in form component
Modified: 11/30/2024
HIGHPackagist
GHSA-5qp6-78pr-gv8c· CVE-2013-4701PHP OpenID Library Denial of Service vulnerability
Modified: 12/2/2024
MEDIUM4.6Packagist
GHSA-5wx6-xwxf-q8qjCross-Site Scripting in TYPO3 Backend
Modified: 12/2/2024
MEDIUM5.3Packagist
GHSA-6487-3qvg-8px9TYPO3 Information Disclosure in Install Tool
Modified: 12/4/2024
HIGH8.8Packagist
GHSA-657m-v5vm-f6rw· BIT-typo3-2021-41113, CVE-2021-41113Cross-Site-Request-Forgery in Backend
Modified: 7/8/2026
MEDIUMPackagist
GHSA-66j3-66cp-6c2m· CVE-2010-5099TYPO3 Path Traversal vulnerability
Modified: 4/12/2025
CRITICAL9.9Packagist
GHSA-67wg-6j7r-mqh8Arbitrary Code Execution in TYPO3 CMS
Modified: 12/2/2024
MEDIUMPackagist
GHSA-6f9m-v7mp-7jjqAuthentication Bypass in TYPO3 CMS
Modified: 12/2/2024
MEDIUMPackagist
GHSA-6fc6-cj2j-h22xTYPO3 Multiple Cross-Site Scripting vulnerabilities in frontend
Modified: 11/29/2024
MEDIUM6.4Packagist
GHSA-6mh3-j5r5-2379· BIT-typo3-2021-32668, CVE-2021-32668Cross-Site Scripting in Query Generator & Query View
Modified: 7/8/2026
MEDIUM5.4Packagist
GHSA-6xh8-8pfv-53vxAuthentication Bypass in TYPO3 CMS
Modified: 12/2/2024
HIGHPackagist
GHSA-74w6-ww7w-45j9· CVE-2009-0258Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection
Modified: 1/23/2024
MEDIUM6.5Packagist
GHSA-772m-43f3-hmf8TYPO3 Broken Access Control in Localization Handling
Modified: 12/4/2024
MEDIUM4.7Packagist
GHSA-7733-hjv6-4h47· BIT-typo3-2020-15241, CVE-2020-15241Cross-Site Scripting in ternary conditional operator
Modified: 9/10/2026
MEDIUM6.8Packagist
GHSA-77p4-wfr8-977w· CVE-2019-19848TYPO3 Directory Traversal on ZIP extraction
Modified: 4/25/2024
CRITICAL9.8Packagist
GHSA-79gv-5cgx-x6rx· CVE-2011-4628Typo3 Authentication Bypass
Modified: 1/12/2024
LOWPackagist
GHSA-7gg8-3r6j-5g55· CVE-2012-3529Typo3 Backend Configuration XSS Vulnerability
Modified: 1/12/2024
MEDIUMPackagist
GHSA-7jfm-px59-99w8· CVE-2012-1605Typo3 Extbase Framework Unsafe Deserialization
Modified: 11/8/2023
MEDIUM5.4Packagist
GHSA-7q33-hxwj-7p8vTYPO3 Cross-Site Scripting in Backend Modal Component
Modified: 12/4/2024
HIGH8.8Packagist
GHSA-7qwg-fcpw-xg5gPrivilege Escalation & SQL Injection in TYPO3 CMS
Modified: 12/2/2024
LOWPackagist
GHSA-7w6c-5pr4-7qvp· CVE-2012-3528Typo3 Backend XSS Vulnerability
Modified: 1/12/2024
LOWPackagist
GHSA-7wwr-p84q-qr3q· CVE-2012-1606Typo3 Backend XSS Vulnerabilities
Modified: 11/8/2023
MEDIUM6.1Packagist
GHSA-85ch-44w7-rf32TYPO3 Cross-Site Scripting in Fluid ViewHelpers
Modified: 12/4/2024
HIGH8.8Packagist
GHSA-86hp-xrhj-fhpq· CVE-2019-12747TYPO3 Vulnerable to Insecure Deserialization
Modified: 2/3/2026
MEDIUM4.6Packagist
GHSA-86r8-4g3w-7xjpCross-Site Scripting in TYPO3 Backend
Modified: 12/2/2024
MEDIUM5.3Packagist
GHSA-87hc-phmj-rhgh· CVE-2017-6370TYPO3 Information Disclosure Vulnerability
Modified: 4/25/2024
MEDIUM5.9Packagist
GHSA-8c28-5mp7-v24h· BIT-typo3-2022-23500, CVE-2022-23500TYPO3 CMS vulnerable to Denial of Service in Page Error Handling
Modified: 12/6/2023
MEDIUM4.3Packagist
GHSA-8gmv-9hwg-w89g· BIT-typo3-2022-31046, CVE-2022-31046Information Disclosure via Export Module
Modified: 12/6/2023
MEDIUM6.5Packagist
GHSA-8grp-3j5v-543g· CVE-2011-4901Typo3 Arbitrary Information Disclosure
Modified: 1/12/2024
HIGHPackagist
GHSA-8h28-f46f-m87hInsecure Deserialization in TYPO3 CMS
Modified: 12/2/2024
HIGH8.8Packagist
GHSA-8h4m-r4wm-xj7rTYPO3 Arbitrary Code Execution via File List Module
Modified: 12/4/2024
MEDIUMPackagist
GHSA-8j9v-4hhh-x43cCross-Site Scripting (XSS) in TYPO3 component CSS styled content
Modified: 12/1/2024
MEDIUM5.4Packagist
GHSA-8m6j-p5jv-v69wTYPO3 Cross-Site Scripting in Online Media Asset Rendering
Modified: 12/4/2024
MEDIUM6.4Packagist
GHSA-8mq9-fqv8-59wf· BIT-typo3-2021-32667, CVE-2021-32667Cross-Site Scripting in Page Preview
Modified: 7/8/2026
MEDIUM5.7Packagist
GHSA-8w3p-qh3x-6gjr· BIT-typo3-2022-23504, CVE-2022-23504TYPO3 CMS vulnerable to Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration
Modified: 10/29/2024
MEDIUMPackagist
GHSA-947m-vgqc-x6v4· CVE-2012-6144Typo3 Backend History Module Vulnerable to SQL Injection
Modified: 1/12/2024
MEDIUMPackagist
GHSA-94c2-g68f-9r98· CVE-2012-3530Typo3 API XSS Vulnerability
Modified: 1/12/2024
HIGH8.1Packagist
GHSA-954j-f27r-cj52· BIT-typo3-2020-26228, CVE-2020-26228Cleartext storage of session identifier
Modified: 7/8/2026
HIGHPackagist
GHSA-9895-53fc-98v2TYPO3 SQL Injection in dbal
Modified: 11/29/2024
LOWPackagist
GHSA-989h-wv8x-933p· CVE-2015-5956TYPO3 cross-site scripting (XSS)
Modified: 12/7/2024
MEDIUM5.4Packagist
GHSA-9c6w-55cp-5w25· BIT-typo3-2022-36107, CVE-2022-36107TYPO3 CMS Stored Cross-Site Scripting via FileDumpController
Modified: 12/6/2023
MEDIUMPackagist
GHSA-wh8q-72cp-p5wfCross-Site Scripting in TYPO3 component Indexed Search
Modified: 11/29/2024
MEDIUMPackagist
GHSA-9j8h-xrgj-7gw2· CVE-2014-3944TYPO3 Improper Session Invalidation
Modified: 12/8/2024
MEDIUM6.5Packagist
GHSA-9vxq-mxw5-mcgp· CVE-2011-4902Typo3 Arbitrary File Delete
Modified: 1/12/2024
MEDIUMPackagist
GHSA-c22j-84c7-cm77· CVE-2009-0815TYPO3 leaks a hash secret in an error message
Modified: 4/10/2025
MEDIUM6.1Packagist
GHSA-c5c9-8c6m-727v· BIT-typo3-2021-32768, CVE-2021-32768Cross-Site Scripting via Rich-Text Content
Modified: 7/8/2026
HIGH7.3Packagist
GHSA-c5mj-39cf-3pp5TYPO3 Security Misconfiguration for Backend User Accounts
Modified: 12/4/2024
HIGH7.5Packagist
GHSA-c5wx-6c2c-f7rm· BIT-typo3-2022-23503, CVE-2022-23503TYPO3 CMS vulnerable to Arbitrary Code Execution via Form Framework
Modified: 12/6/2023
LOW3.7Packagist
GHSA-c7p6-3c9c-f88qInformation Disclosure in TYPO3 CMS
Modified: 12/2/2024
MEDIUM5.0Packagist
GHSA-c7rj-92xr-wprgInsecure Unserialize in TYPO3 Backend
Modified: 12/2/2024
MEDIUMPackagist
GHSA-cg4m-qjjp-7497TYPO3 Cross-Site Scripting in link validator component
Modified: 11/29/2024
MEDIUM6.5Packagist
GHSA-f3wf-q4fj-3gxfTYPO3 Denial of Service in Online Media Asset Handling
Modified: 12/4/2024
MEDIUMPackagist
GHSA-f5rr-9r84-wwqfTypo3 Broken Access Control in Import Module
Modified: 12/2/2024
MEDIUM5.3Packagist
GHSA-f624-8hfq-5fh3TYPO3 Information Disclosure of Installed Extensions
Modified: 12/4/2024
HIGH8.1Packagist
GHSA-f777-f784-36gmTYPO3 Security Misconfiguration in Install Tool Cookie
Modified: 12/4/2024
MEDIUM6.1Packagist
GHSA-ffcm-vhcw-p32r· CVE-2016-4056TYPO3 Backend component Cross-site scripting (XSS) vulnerability
Modified: 4/25/2024