Browse CVEs

HIGH 7.5 CVE-2024-47047 An issue was discovered in the powermail extension through 12.4.0 for TYPO3. It fails to validate the mail parameter of the createAction, resulting i… Powermail after 12.4.0 Fix from $1,9502024-09-17 CRITICAL 9.8 CVE-2024-45233 An issue was discovered in powermail extension through 12.3.5 for TYPO3. Several actions in the OutputController can directly be called, due to missi… Powermail 7.5.0 / 8.5.0+ Fix from $2,3002024-08-29 MEDIUM 5.3 CVE-2024-45232 An issue was discovered in powermail extension through 12.3.5 for TYPO3. It fails to validate the mail parameter of the confirmationAction, resulting… Powermail 7.5.0 / 8.5.0+ Fix from $1,6002024-08-29 MEDIUM 5.3 CVE-2022-44543 The femanager extension before 5.5.2, 6.x before 6.3.3, and 7.x before 7.0.1 for TYPO3 allows creation of frontend users in restricted groups (if the… Femanager 5.5.2 / 6.3.3+ Fix from $1,6002023-12-12 HIGH 7.5 CVE-2023-25013 An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the Invit… Femanager 5.5.3 / 6.3.4+ Fix from $1,9502023-02-02 HIGH 7.5 CVE-2023-25014 An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the Invit… Femanager 5.5.3 / 6.3.4+ Fix from $1,9502023-02-02 CRITICAL 9.8 CVE-2022-35628EPSS 26% A SQL injection issue was discovered in the lux extension before 17.6.1, and 18.x through 24.x before 24.0.2, for TYPO3. Living User Experience 17.6.1 / 24.0.2+ Fix from $2,3002022-07-12 MEDIUM 5.4 CVE-2021-36787 The femanager extension before 5.5.1 and 6.x before 6.3.1 for TYPO3 allows XSS via a crafted SVG document. Femanager 5.5.1 / 6.3.1+ Fix from $1,6002021-08-13 MEDIUM 6.4 CVE-2014-6292 The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the records of other frontend users via unspecified v… Femanager after 1.0.8 Fix from $1,6002014-10-03