Vulnerabilities > Typo3

DATE CVE VULNERABILITY TITLE RISK
2022-09-13 CVE-2022-36107 Cross-site Scripting vulnerability in Typo3
TYPO3 is an open source PHP based web content management system released under the GNU GPL.
network
low complexity
typo3 CWE-79
5.4
2022-09-13 CVE-2022-36108 Cross-site Scripting vulnerability in Typo3
TYPO3 is an open source PHP based web content management system released under the GNU GPL.
network
low complexity
typo3 CWE-79
6.1
2022-09-13 CVE-2022-36020 Cross-site Scripting vulnerability in Typo3 Html Sanitizer
The typo3/html-sanitizer package is an HTML sanitizer, written in PHP, aiming to provide XSS-safe markup based on explicitly allowed tags, attributes and values.
network
low complexity
typo3 CWE-79
6.1
2022-06-14 CVE-2022-31046 Cleartext Transmission of Sensitive Information vulnerability in Typo3
TYPO3 is an open source web content management system.
network
low complexity
typo3 CWE-319
4.3
2022-06-14 CVE-2022-31047 Information Exposure Through an Error Message vulnerability in Typo3
TYPO3 is an open source web content management system.
network
low complexity
typo3 CWE-209
6.5
2022-06-14 CVE-2022-31048 Cross-site Scripting vulnerability in Typo3
TYPO3 is an open source web content management system.
network
low complexity
typo3 CWE-79
5.4
2022-06-14 CVE-2022-31049 Cross-site Scripting vulnerability in Typo3
TYPO3 is an open source web content management system.
network
low complexity
typo3 CWE-79
5.4
2022-06-14 CVE-2022-31050 Insufficient Session Expiration vulnerability in Typo3
TYPO3 is an open source web content management system.
network
low complexity
typo3 CWE-613
7.2
2021-10-05 CVE-2021-41113 Cross-Site Request Forgery (CSRF) vulnerability in Typo3
TYPO3 is an open source PHP based web content management system released under the GNU GPL.
network
low complexity
typo3 CWE-352
8.8
2021-10-05 CVE-2021-41114 Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability in Typo3
TYPO3 is an open source PHP based web content management system released under the GNU GPL.
network
low complexity
typo3 CWE-644
5.3