.nav-burger { display: none !important; } @media (max-width: 1180px) { /* Match Tailwind's base layer: its important [hidden] reset otherwise wins. */ @layer base { .nav-overlay[hidden] { display: flex !important; } } .nav-overlay[hidden] { position: static; padding: 2rem 1rem; } }

typo3/cms 7.6.8 vulnerabilities

188 advisories known · typo3/cms@7.6.8 · 28 affect this release · Dependencies not checked · showing 88 more

SEVERITYADVISORYPUBLISHED

Does not affect 7.6.8

SEVERITYADVISORYPUBLISHED

MediumBootstrap Cross-site Scripting vulnerabilityGHSA-pj7m-g53m-7638CVE-2018-14041Affected >=8.0.0 <8.7.23, >=9.0.0 <9.5.4Fixed in 8.7.23 Fixed in 9.5.4OSV source ↗8 years ago

MediumTypo3 Cross-Site Scripting in Language Pack HandlingGHSA-259v-xm34-p7frAffected >=9.0.0 <9.5.4Fixed in 9.5.4OSV source ↗2 years ago

MediumTypo3 Broken Access Control in Import ModuleGHSA-f5rr-9r84-wwqfAffected >=9.0.0 <9.5.8Fixed in 9.5.8OSV source ↗2 years ago

MediumTypo3 Arbitrary Code Execution and Cross-Site Scripting in Backend APIGHSA-hww5-6x85-mc24Affected >=8.0.0 <8.7.27, >=9.0.0 <9.5.8Fixed in 8.7.27 Fixed in 9.5.8OSV source ↗2 years ago

MediumTypo3 Security Misconfiguration in Frontend Session HandlingGHSA-qr5f-6fcv-w69qAffected >=8.0.0 <8.7.27, >=9.0.0 <9.5.8Fixed in 8.7.27 Fixed in 9.5.8OSV source ↗2 years ago

MediumTypo3 Security Misconfiguration in User Session HandlingGHSA-g9rv-6g56-65h8Affected >=8.0.0 <8.7.25, >=9.0.0 <9.5.6Fixed in 8.7.25 Fixed in 9.5.6OSV source ↗2 years ago

MediumTypo3 Information Disclosure in Backend User InterfaceGHSA-q9c4-9v5m-597pAffected >=8.0.0 <8.7.27, >=9.0.0 <9.5.8Fixed in 8.7.27 Fixed in 9.5.8OSV source ↗2 years ago

MediumTypo3 Information Disclosure in User AuthenticationGHSA-m96r-7vqm-j95gAffected >=9.0.0 <9.5.6Fixed in 9.5.6OSV source ↗2 years ago

MediumDenial of Service (DoS) attack possibility in TYPO3 component Indexed SearchGHSA-pmxp-7224-h794Affected >=6.2.0 <6.2.19, >=7.6.0 <7.6.4Fixed in 6.2.19 Fixed in 7.6.4OSV source ↗2 years ago

MediumTypo3 Arbitrary File Disclosure in Form ComponentGHSA-wrpf-2x8h-82grAffected >=6.2.0 <6.2.20Fixed in 6.2.20OSV source ↗2 years ago

MediumCross-Site Scripting (XSS) in TYPO3 component CSS styled contentGHSA-8j9v-4hhh-x43cAffected >=6.2.0 <6.2.19, >=7.6.0 <7.6.4Fixed in 6.2.19 Fixed in 7.6.4OSV source ↗2 years ago

MediumCross-Site Scripting (XSS) in TYPO3 component BackendGHSA-3jxq-5xhh-9jr3Affected >=6.2.0 <6.2.19Fixed in 6.2.19OSV source ↗2 years ago

MediumTYPO3 Cross-Site Scripting (XSS) in form componentGHSA-5j86-5xvg-7q93Affected >=6.2.0 <6.2.18Fixed in 6.2.18OSV source ↗2 years ago

MediumTYPO3 Cross-Site Scripting in legacy form componentGHSA-vgm8-r9gm-fw59Affected >=6.2.0 <6.2.18Fixed in 6.2.18OSV source ↗2 years ago

MediumTYPO3 Cross-Site Scripting in link validator componentGHSA-cg4m-qjjp-7497Affected >=6.2.0 <6.2.18, >=7.6.0 <7.6.3Fixed in 6.2.18 Fixed in 7.6.3OSV source ↗2 years ago

MediumTYPO3 Multiple Cross-Site Scripting vulnerabilities in frontendGHSA-6fc6-cj2j-h22xAffected >=6.2.0 <6.2.16, >=7.0.0 <7.6.1Fixed in 6.2.16 Fixed in 7.6.1OSV source ↗2 years ago

MediumCross-Site Scripting in TYPO3 component Indexed SearchGHSA-wh8q-72cp-p5wfAffected >=6.2.0 <6.2.16Fixed in 6.2.16OSV source ↗2 years ago

MediumTYPO3 is susceptible to Cross-Site FlashingGHSA-qrxh-46mr-pr7qAffected >=6.2.0 <6.2.16Fixed in 6.2.16OSV source ↗2 years ago

MediumMultiple Cross-Site Scripting vulnerabilities in TYPO3 backendGHSA-5cxf-xx9j-54jcAffected >=6.2.0 <6.2.16, >=7.0.0 <7.6.1Fixed in 6.2.16 Fixed in 7.6.1OSV source ↗2 years ago

MediumInsufficient Session Expiration in TYPO3's Admin ToolGHSA-wwjw-r3gj-39fqBIT-typo3-2022-31050CVE-2022-31050Affected >=10.0.0 <10.4.29, >=11.0.0 <11.5.11Fixed in 10.4.29 Fixed in 11.5.11OSV source ↗4 years ago

MediumTYPO3 allows remote attackers to obtain the database name via a direct requestGHSA-q68v-vcjg-r3vpCVE-2012-1607Affected >=4.4.0 <=4.4.13, >=4.5.0 <=4.5.13, >=4.6.0 <=4.6.6OSV source ↗4 years ago

MediumTypo3 API XSS VulnerabilitiesGHSA-w3v6-r62r-fvqhCVE-2012-1608Affected >=4.4.0 <4.4.14, >=4.5.0 <4.5.14, >=4.6.0 <4.6.7Fixed in 4.4.14 Fixed in 4.5.14 Fixed in 4.6.7OSV source ↗4 years ago

MediumTypo3 Extbase Framework Unsafe DeserializationGHSA-7jfm-px59-99w8CVE-2012-1605Affected >=4.4.0 <4.4.14, >=4.5.0 <4.5.14, >=4.6 <4.6.7Fixed in 4.4.14 Fixed in 4.5.14 Fixed in 4.6.7OSV source ↗4 years ago

MediumTypo3 Backend History Module Vulnerable to XSSGHSA-2hp4-8h6h-93rrCVE-2012-6146Affected >=4.5 <4.5.21, >=4.6 <4.6.14, >=4.7 <4.7.6Fixed in 4.5.21 Fixed in 4.6.14 Fixed in 4.7.6OSV source ↗4 years ago

MediumTYPO3 Improper Session InvalidationGHSA-9j8h-xrgj-7gw2CVE-2014-3944Affected >=6.2.0 <6.2.3Fixed in 6.2.3OSV source ↗4 years ago

MediumTypo3 Information DisclosureGHSA-vccp-5v5h-p8m6CVE-2014-3946Affected >=6.2.0 <6.2.3Fixed in 6.2.3OSV source ↗4 years ago

MediumTypo3 Open Redirect In Frontend RenderingGHSA-v6xv-rmqc-wcc8CVE-2014-9508Affected >=4.5.0 <4.5.39, >=4.6.0 <6.2.9, >=7.0.0 <7.0.2Fixed in 4.5.39 Fixed in 6.2.9 Fixed in 7.0.2OSV source ↗4 years ago

MediumTYPO3 Path Traversal vulnerabilityGHSA-66j3-66cp-6c2mCVE-2010-5099Affected >=4.2.0 <4.2.16, >=4.3.0 <4.3.9, >=4.4.0 <4.4.5Fixed in 4.2.16 Fixed in 4.3.9 Fixed in 4.4.5OSV source ↗4 years ago

MediumTYPO3 Directory Traversal vulnerabilityGHSA-rmqc-wfjm-3f66CVE-2010-5101Affected >=4.2.0 <4.2.16, >=4.3.0 <4.3.9, >=4.4.0 <4.4.5Fixed in 4.2.16 Fixed in 4.3.9 Fixed in 4.4.5OSV source ↗4 years ago

MediumTYPO3 SQL Injection vulnerabilityGHSA-r2w2-2r2x-fpcxCVE-2010-5103Affected >=4.2.0 <4.2.16, >=4.3.0 <4.3.9, >=4.4.0 <4.4.5Fixed in 4.2.16 Fixed in 4.3.9 Fixed in 4.4.5OSV source ↗4 years ago

MediumTypo3 Exception Handler XSSGHSA-qfr3-29w6-hwpgCVE-2012-2112Affected >=4.4 <4.4.15, >=4.5 <4.5.15, >=4.6 <4.6.8, ==4.7Fixed in 4.4.15 Fixed in 4.5.15 Fixed in 4.6.8OSV source ↗4 years ago

MediumTYPO3 allows remote authenticated backend users to unserialize arbitrary objectsGHSA-m4hw-r893-xh4gCVE-2012-3527Affected >=4.5.0 <4.5.19, >=4.6.0 <4.6.12, >=4.7.0 <4.7.4Fixed in 4.5.19 Fixed in 4.6.12 Fixed in 4.7.4OSV source ↗4 years ago

MediumTypo3 API XSS VulnerabilityGHSA-94c2-g68f-9r98CVE-2012-3530Affected >=4.5 <4.5.19, >=4.6 <4.6.12, >=4.7 <4.7.4Fixed in 4.5.19 Fixed in 4.6.12 Fixed in 4.7.4OSV source ↗4 years ago

MediumTypo3 Install Tool XSS VulnerabilityGHSA-p9wg-jvj4-cx26CVE-2012-3531Affected >=4.5 <4.5.19, >=4.6 <4.6.12, >=4.7 <4.7.4Fixed in 4.5.19 Fixed in 4.6.12 Fixed in 4.7.4OSV source ↗4 years ago

MediumTypo3 Backend History Module Vulnerable to SQL InjectionGHSA-947m-vgqc-x6v4CVE-2012-6144Affected >=4.5.0 <4.5.21, >=4.6.0 <4.6.14, >=4.7.0 <4.7.6Fixed in 4.5.21 Fixed in 4.6.14 Fixed in 4.7.6OSV source ↗4 years ago

MediumTypo3 Host Header Spoofing VulnerabilityGHSA-594h-cx6w-p4jfCVE-2014-3941Affected >=4.5.0 <4.5.34, >=4.7.0 <4.7.19, >=6.0.0 <6.0.14, >=6.1.0 <6.1.9, >=6.2.0 <6.2.3Fixed in 4.5.34 Fixed in 4.7.19 Fixed in 6.0.14 Fixed in 6.1.9 Fixed in 6.2.3OSV source ↗4 years ago

MediumMoodle cross-site scripting (XSS) vulnerabilitiesGHSA-j6c3-3c4w-qv8pCVE-2013-7341Affected >=6.2.0 <6.2.14, >=7.0.0 <7.3.1Fixed in 6.2.14 Fixed in 7.3.1OSV source ↗5 years ago

MediumTYPO3 Install Tool Subcomponent Allows Access Using Only a Password's MD5 Hash as a CredentialGHSA-hwrc-w5gg-f335CVE-2009-3635Affected <=4.0.13, >=4.1.0 <4.1.13, >=4.2.0 <4.2.10, >=4.3beta1 <4.3beta2Fixed in 4.1.13 Fixed in 4.2.10 Fixed in 4.3beta2OSV source ↗5 years ago

MediumTYPO3 leaks a hash secret in an error messageGHSA-c22j-84c7-cm77CVE-2009-0815Affected >=3.3 <4.0.12, >=4.1 <4.1.10, >=4.2 <4.2.6Fixed in 4.0.12 Fixed in 4.1.10 Fixed in 4.2.6OSV source ↗5 years ago

MediumTYPO3 CMS vulnerable to Weak Authentication in Frontend LoginGHSA-jfp7-79g7-89rfBIT-typo3-2022-23501CVE-2022-23501Affected >=10.0.0 <10.4.33, >=11.0.0 <11.5.20, >=12.0.0 <12.1.1Fixed in 10.4.33 Fixed in 11.5.20 Fixed in 12.1.1OSV source ↗4 years ago

MediumTYPO3 CMS vulnerable to Denial of Service in Page Error HandlingGHSA-8c28-5mp7-v24hBIT-typo3-2022-23500CVE-2022-23500Affected >=10.0.0 <10.4.33, >=11.0.0 <11.5.20Fixed in 10.4.33 Fixed in 11.5.20OSV source ↗4 years ago

MediumTYPO3 CMS vulnerable to Denial of Service in Page Error HandlingGHSA-fffr-7x4x-f98qBIT-typo3-2022-36104CVE-2022-36104Affected >=11.4.0 <11.5.16Fixed in 11.5.16OSV source ↗4 years ago

MediumDenial of Service in Page Error HandlingGHSA-4p9g-qgx9-397pBIT-typo3-2021-21359CVE-2021-21359Affected >=10.0.0 <10.4.14, >=11.0.0 <11.1.1, >=9.0.0 <9.5.25Fixed in 10.4.14 Fixed in 11.1.1 Fixed in 9.5.25OSV source ↗6 years ago

MediumCleartext storage of session identifierGHSA-qx3w-4864-94chBIT-typo3-2021-21339CVE-2021-21339Affected >=10.0.0 <10.4.14, >=11.0.0 <11.1.1, >=9.0.0 <9.5.25Fixed in 10.4.14 Fixed in 11.1.1 Fixed in 9.5.25OSV source ↗6 years ago

MediumTYPO3 CMS vulnerable to Sensitive Information Disclosure via YAML Placeholder Expressions in Site ConfigurationGHSA-8w3p-qh3x-6gjrBIT-typo3-2022-23504CVE-2022-23504Affected >=10.0.0 <10.4.33, >=11.0.0 <11.5.20, >=12.0.0 <12.1.1Fixed in 10.4.33 Fixed in 11.5.20 Fixed in 12.1.1OSV source ↗4 years ago

MediumTYPO3 SQL Injection in low-level Query GeneratorGHSA-59pj-7mjh-4465CVE-2019-19850Affected >=10.0 <10.2.2, >=8.0 <8.7.30, >=9.0 <9.5.12Fixed in 10.2.2 Fixed in 8.7.30 Fixed in 9.5.12OSV source ↗4 years ago

MediumCross-Site Scripting in TYPO3 CMS BackendGHSA-v4qr-8h2v-qpjxAffected >=8.0.0 <8.7.5Fixed in 8.7.5OSV source ↗2 years ago

MediumAuthentication Bypass in TYPO3 FrontendGHSA-mh3r-6cp5-hc2jAffected >=8.2.0 <8.6.1Fixed in 8.6.1OSV source ↗2 years ago

MediumAuthentication Bypass in TYPO3 CMSGHSA-6xh8-8pfv-53vxAffected >=6.2.0 <6.2.20, >=7.6.0 <7.6.5, >=8.0.0 <8.0.1Fixed in 6.2.20 Fixed in 7.6.5 Fixed in 8.0.1OSV source ↗2 years ago

MediumTYPO3 Cross-Site Scripting Vulnerability Exploitable by EditorsGHSA-wp8j-c736-c5r3Affected >=6.2.0 <6.2.14, >=7.0.0 <7.3.1Fixed in 6.2.14 Fixed in 7.3.1OSV source ↗2 years ago

MediumTYPO3 CMS vulnerable to Insufficient Session Expiration after Password ResetGHSA-mgj2-q8wp-29rrBIT-typo3-2022-23502CVE-2022-23502Affected >=10.0.0 <10.4.33, >=11.0.0 <11.5.20, >=12.0.0 <12.1.1Fixed in 10.4.33 Fixed in 11.5.20 Fixed in 12.1.1OSV source ↗4 years ago

MediumTYPO3 CMS missing check for expiration time of password reset token for backend usersGHSA-5959-4x58-r8c2BIT-typo3-2022-36106CVE-2022-36106Affected >=10.4.0 <10.4.32, >=11.0.0 <11.5.16Fixed in 10.4.32 Fixed in 11.5.16OSV source ↗4 years ago

MediumTYPO3 CMS Stored Cross-Site Scripting via FileDumpControllerGHSA-9c6w-55cp-5w25BIT-typo3-2022-36107CVE-2022-36107Affected >=10.0.0 <10.4.32, >=11.0.0 <11.5.16Fixed in 10.4.32 Fixed in 11.5.16OSV source ↗4 years ago

MediumTYPO3 CMS vulnerable to Cross-Site Scripting in <f:asset.css> view helperGHSA-fv2m-9249-qx85BIT-typo3-2022-36108CVE-2022-36108Affected >=10.3.0 <10.4.32, >=11.0.0 <11.5.16Fixed in 10.4.32 Fixed in 11.5.16OSV source ↗4 years ago

MediumCross-Site Scripting in TYPO3's Frontend Login MailerGHSA-h4mx-xv96-2jgmBIT-typo3-2022-31049CVE-2022-31049Affected >=10.0.0 <10.4.29, >=11.0.0 <11.5.11Fixed in 10.4.29 Fixed in 11.5.11OSV source ↗4 years ago

MediumCross-Site Scripting in TYPO3's Form FrameworkGHSA-3r95-23jp-mhvgBIT-typo3-2022-31048CVE-2022-31048Affected >=10.0.0 <10.4.29, >=11.0.0 <11.5.11Fixed in 10.4.29 Fixed in 11.5.11OSV source ↗4 years ago

MediumTYPO3 Cross-site Scripting vulnerabilityGHSA-j5v7-9xr5-m7gxCVE-2015-8759Affected >=6.2.0 <6.2.16, >=7.0.0 <7.6.1Fixed in 6.2.16 Fixed in 7.6.1OSV source ↗4 years ago

MediumTYPO3 CMS indexed search Cross-site Scripting vulnerabilityGHSA-xx7m-8rq2-cw2vCVE-2015-8756Affected >=6.2.0 <6.2.16Fixed in 6.2.16OSV source ↗4 years ago

MediumTypo3 XSS VulnerabilityGHSA-56f9-5563-m2h7CVE-2015-8755Affected >=6.2 <6.2.16, >=7.0 <7.6.1Fixed in 6.2.16 Fixed in 7.6.1OSV source ↗4 years ago

MediumTypo3 XSS VulnerabilityGHSA-29wr-24h5-95r5CVE-2011-4630Affected <4.3.12, >=4.4.0 <4.4.9, >=4.5.0 <4.5.4Fixed in 4.3.12 Fixed in 4.4.9 Fixed in 4.5.4OSV source ↗5 years ago

MediumTypo3 XSS VulnerabilitiesGHSA-h86g-796f-hhfqCVE-2011-4632Affected <4.3.12, >=4.4.0 <4.4.9, >=4.5.0 <4.5.4Fixed in 4.3.12 Fixed in 4.4.9 Fixed in 4.5.4OSV source ↗5 years ago

MediumCross-Site Scripting in Content Preview (CType menu)GHSA-x7hc-x7fm-f7qhBIT-typo3-2021-21370CVE-2021-21370Affected >=10.0.0 <10.4.14, >=11.0.0 <11.1.1, >=9.0.0 <9.5.25Fixed in 10.4.14 Fixed in 11.1.1 Fixed in 9.5.25OSV source ↗6 years ago

MediumImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in typo3/cms-formGHSA-x79j-wgqv-g8h2BIT-typo3-2021-21358CVE-2021-21358Affected >=10.0.0 <10.4.14, >=11.0.0 <11.1.1Fixed in 10.4.14 Fixed in 11.1.1OSV source ↗6 years ago

MediumCross-Site Scripting in Content PreviewGHSA-fjh3-g8gq-9q92BIT-typo3-2021-21340CVE-2021-21340Affected >=10.0.0 <10.4.14, >=11.0.0 <11.1.1Fixed in 10.4.14 Fixed in 11.1.1OSV source ↗6 years ago

MediumCross-Site Scripting in TYPO3 CMS Link HandlingGHSA-4j77-gg36-9864BIT-typo3-2020-11065CVE-2020-11065Affected >=10.0.0 <10.4.2, >=9.0.0 <9.5.17Fixed in 10.4.2 Fixed in 9.5.17OSV source ↗6 years ago

MediumCross-Site Scripting in TYPO3 CMS Form EngineGHSA-43gj-mj2w-wh46BIT-typo3-2020-11064CVE-2020-11064Affected >=10.0.0 <10.4.2, >=9.0.0 <9.5.17Fixed in 10.4.2 Fixed in 9.5.17OSV source ↗6 years ago

MediumTYPO3 Information Disclosure of Installed ExtensionsGHSA-f624-8hfq-5fh3Affected >=8.0.0 <8.7.23, >=9.0.0 <9.5.4Fixed in 8.7.23 Fixed in 9.5.4OSV source ↗2 years ago

MediumTYPO3 Frontend vulnerable to Unauthenticated Path DisclosureGHSA-pqfv-97hj-g97gAffected >=6.2.0 <6.2.15, >=7.0.0 <7.4.0Fixed in 6.2.15 Fixed in 7.4.0OSV source ↗2 years ago

MediumTYPO3 CMS vulnerable to User Enumeration via Response TimingGHSA-m392-235j-9r7rBIT-typo3-2022-36105CVE-2022-36105Affected >=10.0.0 <10.4.32, >=11.0.0 <11.5.16Fixed in 10.4.32 Fixed in 11.5.16OSV source ↗4 years ago

MediumInsertion of Sensitive Information into Log File in typo3/cms-coreGHSA-fh99-4pgr-8j99BIT-typo3-2022-31047CVE-2022-31047Affected >=10.0.0 <10.4.29, >=11.0.0 <11.5.11Fixed in 10.4.29 Fixed in 11.5.11OSV source ↗4 years ago

MediumTYPO3 Information Disclosure VulnerabilityGHSA-87hc-phmj-rhghCVE-2017-6370Affected ==7.6.15OSV source ↗5 years ago

MediumInformation Disclosure in User AuthenticationGHSA-34fr-fhqr-7235BIT-typo3-2021-32767CVE-2021-32767Affected >=10.0.0 <10.4.18, >=11.0.0 <11.3.1, >=9.0.0 <9.5.28Fixed in 10.4.18 Fixed in 11.3.1 Fixed in 9.5.28OSV source ↗5 years ago

MediumHTTP Host Header InjectionGHSA-m2jh-fxw4-gphmBIT-typo3-2021-41114CVE-2021-41114Affected >=11.0.0 <11.5.0Fixed in 11.5.0OSV source ↗5 years ago

MediumCross-Site Scripting in ternary conditional operatorGHSA-7733-hjv6-4h47BIT-typo3-2020-15241CVE-2020-15241Affected >=8.0.0 <8.7.25, >=9.0.0 <9.5.6Fixed in 8.7.25 Fixed in 9.5.6OSV source ↗6 years ago

MediumCross-Site Scripting in TYPO3 BackendGHSA-5wx6-xwxf-q8qjAffected >=6.2.0 <6.2.20, >=7.6.0 <7.6.5, >=8.0.0 <8.0.1Fixed in 6.2.20 Fixed in 7.6.5 Fixed in 8.0.1OSV source ↗2 years ago

MediumInformation Disclosure via Export ModuleGHSA-8gmv-9hwg-w89gBIT-typo3-2022-31046CVE-2022-31046Affected >=10.0.0 <10.4.29, >=11.0.0 <11.5.11Fixed in 10.4.29 Fixed in 11.5.11OSV source ↗4 years ago

LowXML External Entity in Dashboard WidgetGHSA-q9cp-mc96-m4w2BIT-typo3-2020-26229CVE-2020-26229Affected >=10.0.0 <10.4.10Fixed in 10.4.10OSV source ↗6 years ago

LowInformation Disclosure in Password ResetGHSA-347x-877p-hcwxBIT-typo3-2020-11063CVE-2020-11063Affected >=10.0.0 <10.4.2Fixed in 10.4.2OSV source ↗6 years ago

LowTypo3 Information Disclosure in Page TreeGHSA-h934-f4m4-wc8xAffected >=9.0.0 <9.5.6Fixed in 9.5.6OSV source ↗2 years ago

LowTypo3 Backend XSS VulnerabilitiesGHSA-7wwr-p84q-qr3qCVE-2012-1606Affected >=4.4.0 <4.4.14, >=4.5.0 <4.5.14, >=4.6.0 <4.6.7Fixed in 4.4.14 Fixed in 4.5.14 Fixed in 4.6.7OSV source ↗4 years ago

LowTypo3 Backend XSS VulnerabilityGHSA-7w6c-5pr4-7qvpCVE-2012-3528Affected >=4.5 <4.5.19, >=4.6 <4.6.12, >=4.7 <4.7.4Fixed in 4.5.19 Fixed in 4.6.12 Fixed in 4.7.4OSV source ↗4 years ago

LowTypo3 Backend Configuration XSS VulnerabilityGHSA-7gg8-3r6j-5g55CVE-2012-3529Affected >=4.5 <4.5.19, >=4.6 <4.6.12, >=4.7 <4.7.4Fixed in 4.5.19 Fixed in 4.6.12 Fixed in 4.7.4OSV source ↗4 years ago

LowTypo3 Backend API XSS VulnerabilityGHSA-qmmw-ch2q-j6xxCVE-2012-6147Affected >=4.5.0 <4.5.21, >=4.6.0 <4.6.14, >=4.7.0 <4.7.6Fixed in 4.5.21 Fixed in 4.6.14 Fixed in 4.7.6OSV source ↗4 years ago

LowTypo3 Function Menu API XSS VulnerabilityGHSA-rgf6-9q7g-55qgCVE-2012-6148Affected >=4.5.0 <4.5.21, >=4.6.0 <4.6.14, >=4.7.0 <4.7.6Fixed in 4.5.21 Fixed in 4.6.14 Fixed in 4.7.6OSV source ↗4 years ago

LowTypo3 Backend History Module Vulnerable to XSSGHSA-w563-rq37-cvq5CVE-2012-6145Affected >=4.5.0 <4.5.21, >=4.6.0 <4.6.14, >=4.7.0 <4.7.6Fixed in 4.5.21 Fixed in 4.6.14 Fixed in 4.7.6OSV source ↗4 years ago

LowTYPO3 Cross-Site Scripting (XSS) vulnerabilities in Content Editing Wizards componentGHSA-r8m7-792j-5jvqCVE-2013-7074Affected >=4.5.0 <4.5.32, >=4.7.0 <4.7.17, >=6.0.0 <6.0.12, >=6.1.0 <6.1.7Fixed in 4.5.32 Fixed in 4.7.17 Fixed in 6.0.12 Fixed in 6.1.7OSV source ↗4 years ago

LowTypo3 XSS VulnerabilitiesGHSA-qqh2-h6gw-6x8xCVE-2014-3943Affected >=4.5.0 <4.5.34, >=4.7.0 <4.7.19, >=6.0.0 <6.0.14, >=6.1.0 <6.1.9, >=6.2.0 <6.2.3Fixed in 4.5.34 Fixed in 4.7.19 Fixed in 6.0.14 Fixed in 6.1.9 Fixed in 6.2.3OSV source ↗4 years ago

LowTYPO3 cross-site scripting (XSS)GHSA-989h-wv8x-933pCVE-2015-5956Affected >=4.0 <=4.5.40, >=6.0 <6.2.15, >=7.0 <7.4.0Fixed in 6.2.15 Fixed in 7.4.0OSV source ↗4 years ago