.nav-burger { display: none !important; } @media (max-width: 1180px) { /* Match Tailwind's base layer: its important [hidden] reset otherwise wins. */ @layer base { .nav-overlay[hidden] { display: flex !important; } } .nav-overlay[hidden] { position: static; padding: 2rem 1rem; } }

typo3/cms-form 12.4.25 vulnerabilities

8 advisories known · typo3/cms-form@12.4.25 · 2 affect this release · Dependencies not checked

SEVERITYADVISORYPUBLISHED

Affects 12.4.25

SEVERITYADVISORYPUBLISHED

HighTYPO3 CMS has Broken Access Control in its Form FrameworkGHSA-pjpj-v387-x4vqCVE-2026-11607Affected <10.4.57, >=11.0.0 <11.5.51, >=12.0.0 <12.4.46, >=13.0.0 <13.4.31, >=14.0.0 <14.3.3Fixed in 10.4.57 Fixed in 11.5.51 Fixed in 12.4.46 Fixed in 13.4.31 Fixed in 14.3.3OSV source ↗5 months ago

HighTYPO3 CMS has Broken Access Control in its Form FrameworkGHSA-hwvq-2w67-rvxpCVE-2026-47346Affected <10.4.57, >=11.0.0 <11.5.51, >=12.0.0 <12.4.46, >=13.0.0 <13.4.31, >=14.0.0 <14.3.3Fixed in 10.4.57 Fixed in 11.5.51 Fixed in 12.4.46 Fixed in 13.4.31 Fixed in 14.3.3OSV source ↗5 months ago

Does not affect 12.4.25

SEVERITYADVISORYPUBLISHED

HighUnrestricted File Upload in Form FrameworkGHSA-2r6j-862c-m2v2BIT-typo3-2021-21355CVE-2021-21355Affected >=10.0.0 <10.4.14, >=11.0.0 <11.1.1, >=8.0.0 <8.7.40, >=9.0.0 <9.5.25Fixed in 10.4.14 Fixed in 11.1.1 Fixed in 8.7.40 Fixed in 9.5.25OSV source ↗6 years ago

HighBroken Access Control in Form FrameworkGHSA-3vg7-jw9m-pc3fBIT-typo3-2021-21357CVE-2021-21357Affected >=10.0.0 <10.4.14, >=11.0.0 <11.1.1, >=8.0.0 <8.7.40, >=9.0.0 <9.5.25Fixed in 10.4.14 Fixed in 11.1.1 Fixed in 8.7.40 Fixed in 9.5.25OSV source ↗6 years ago

HighTYPO3 CMS has Privilege Escalation & SQL Injection in its Form FrameworkGHSA-jh32-v29g-68pqCVE-2026-49741Affected >=14.0.0 <14.3.3Fixed in 14.3.3OSV source ↗5 months ago

MediumTYPO3 CMS - Unrestricted File Upload in Form FrameworkGHSA-mfqj-cqv3-h7xwCVE-2026-15305Affected >=14.2.0 <14.3.5Fixed in 14.3.5OSV source ↗2 months ago

MediumTYPO3 Form Framework Module vulnerable to Cross-Site Request ForgeryGHSA-ww7h-g2qf-7xv6CVE-2024-55922Affected >=10.0.0 <10.4.48, >=11.0.0 <11.5.42, >=12.0.0 <12.4.25, >=13.0.0 <13.4.3Fixed in 10.4.48 Fixed in 11.5.42 Fixed in 12.4.25 Fixed in 13.4.3OSV source ↗2 years ago

MediumImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in typo3/cms-formGHSA-x79j-wgqv-g8h2BIT-typo3-2021-21358CVE-2021-21358Affected >=10.2.0 <10.4.14, >=11.0.0 <11.1.1Fixed in 10.4.14 Fixed in 11.1.1OSV source ↗6 years ago