Vulnerabilities > Dated News Project
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-08-13 | CVE-2021-36789 | SQL Injection vulnerability in Dated News Project Dated News The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows SQL Injection. | 9.8 |
| 2021-08-13 | CVE-2021-36790 | Cross-site Scripting vulnerability in Dated News Project Dated News The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows XSS. | 6.1 |
| 2021-08-13 | CVE-2021-36791 | Unspecified vulnerability in Dated News Project Dated News The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data. | 5.3 |
| 2021-08-13 | CVE-2021-36792 | Unspecified vulnerability in Dated News Project Dated News The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 has incorrect Access Control for confirming various applications. | 7.2 |