Vulnerability index

Browse CVEs

226 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Html Sanitizer MEDIUM 6.1
CVE-2023-47125

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions DOM processing instructions are not …

Fix: 1.5.3 / 2.1.4+
Fix from $1,600 2023-11-14
Html Sanitizer MEDIUM 6.1
CVE-2023-38500

TYPO3 HTML Sanitizer is an HTML sanitizer, written in PHP, aiming to provide cross-site-scripting-safe markup based on explicitly allowed tags, attri…

Fix: 1.5.1 / 2.1.2+
Fix from $1,600 2023-07-25
TYPO3 MEDIUM 5.3
CVE-2023-38499

TYPO3 is an open source PHP based web content management system. Starting in version 9.4.0 and prior to versions 9.5.42 ELTS, 10.4.39 ELTS, 11.5.30, …

Fix: 9.5.42 / 10.4.39+
Fix from $1,600 2023-07-25
TYPO3 MEDIUM 6.1
CVE-2023-24814

TYPO3 is a free and open source Content Management Framework released under the GNU General Public License. In affected versions the TYPO3 core compo…

Fix: 9.5.40 / 9.7.51+
Fix from $1,600 2023-02-07
TYPO3 HIGH 8.8
CVE-2022-23503

TYPO3 is an open source PHP based web content management system. Versions prior to 8.7.49, 9.5.38, 10.4.33, 11.5.20, and 12.1.1 are vulnerable to Cod…

Fix: 8.7.49 / 9.5.38+
Fix from $1,950 2022-12-14
TYPO3 MEDIUM 6.5
CVE-2022-23501

TYPO3 is an open source PHP based web content management system. In versions prior to 8.7.49, 9.5.38, 10.4.33, 11.5.20, and 12.1.1 TYPO3 is vulnerabl…

Fix: 8.7.49 / 9.5.38+
Fix from $1,600 2022-12-14
TYPO3 MEDIUM 5.4
CVE-2022-23502

TYPO3 is an open source PHP based web content management system. In versions prior to 10.4.33, 11.5.20, and 12.1.1, When users reset their password u…

Fix: 10.4.33 / 11.5.20+
Fix from $1,600 2022-12-14
TYPO3 HIGH 7.5
CVE-2022-23500

TYPO3 is an open source PHP based web content management system. In versions prior to 9.5.38, 10.4.33, 11.5.20, and 12.1.1, requesting invalid or non…

Fix: 9.5.38 / 10.4.33+
Fix from $1,950 2022-12-14
Html Sanitizer MEDIUM 6.1
CVE-2022-23499

HTML sanitizer is written in PHP, aiming to provide XSS-safe markup based on explicitly allowed tags, attributes and values. In versions prior to 1.5…

Fix: 2.1.1+
Fix from $1,600 2022-12-13
TYPO3 MEDIUM 6.1
CVE-2022-36108

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the `f:asset.css` view helper…

Fix: after 11.5.15
Fix from $1,600 2022-09-13
TYPO3 MEDIUM 5.4
CVE-2022-36106

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the expiration time of a pass…

Fix: after 11.5.15
Fix from $1,600 2022-09-13
TYPO3 MEDIUM 5.4
CVE-2022-36107

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the `FileDumpController` (bac…

Fix: after 11.5.15
Fix from $1,600 2022-09-13
TYPO3 HIGH 7.5
CVE-2022-36104

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions requesting invalid or non-existing r…

Fix: after 11.5.15
Fix from $1,950 2022-09-13
TYPO3 MEDIUM 5.3
CVE-2022-36105

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that observing response time durin…

Fix: after 11.5.15
Fix from $1,600 2022-09-13
Html Sanitizer MEDIUM 6.1
CVE-2022-36020

The typo3/html-sanitizer package is an HTML sanitizer, written in PHP, aiming to provide XSS-safe markup based on explicitly allowed tags, attributes…

Fix: 1.0.7 / 2.0.16+
Fix from $1,600 2022-09-13
TYPO3 HIGH 7.2
CVE-2022-31050

TYPO3 is an open source web content management system. Prior to versions 9.5.34 ELTS, 10.4.29, and 11.5.11, Admin Tool sessions initiated via the TYP…

Fix: 9.5.35 / 10.4.29+
Fix from $1,950 2022-06-14
TYPO3 MEDIUM 6.5
CVE-2022-31047

TYPO3 is an open source web content management system. Prior to versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11, system internal…

Fix: 7.6.57 / 8.7.47+
Fix from $1,600 2022-06-14
TYPO3 MEDIUM 5.4
CVE-2022-31048

TYPO3 is an open source web content management system. Prior to versions 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11, the Form Designer backend mo…

Fix: 8.7.47 / 9.5.35+
Fix from $1,600 2022-06-14
TYPO3 MEDIUM 5.4
CVE-2022-31049

TYPO3 is an open source web content management system. Prior to versions 9.5.34 ELTS, 10.4.29, and 11.5.11, user submitted content was used without b…

Fix: 9.5.35 / 10.4.29+
Fix from $1,600 2022-06-14
TYPO3 HIGH 8.8
CVE-2021-41113

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the new TYPO3 v11 feature tha…

Fix: 11.5.0+
Fix from $1,950 2021-10-05
TYPO3 MEDIUM 5.3
CVE-2021-41114

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that TYPO3 CMS is susceptible to h…

Fix: 11.5.0+
Fix from $1,600 2021-10-05
TYPO3 MEDIUM 6.1
CVE-2021-32768

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions failing to properly parse, sanitize …

Fix: after 11.3.1
Fix from $1,600 2021-08-10
TYPO3 MEDIUM 6.5
CVE-2021-32767

TYPO3 is an open source PHP based web content management system. In versions 9.0.0 through 9.5.27, 10.0.0 through 10.4.17, and 11.0.0 through 11.3.0,…

Fix: after 11.3.0
Fix from $1,600 2021-07-20
TYPO3 MEDIUM 5.4
CVE-2021-32669

TYPO3 is an open source PHP based web content management system. Versions 9.0.0 through 9.5.28, 10.0.0 through 10.4.17, and 11.0.0 through 11.3.0 hav…

Fix: after 11.3.0
Fix from $1,600 2021-07-20
TYPO3 MEDIUM 5.4
CVE-2021-32667

TYPO3 is an open source PHP based web content management system. Versions 9.0.0 through 9.5.28, 10.0.0 through 10.4.17, and 11.0.0 through 11.3.0 hav…

Fix: after 11.3.0
Fix from $1,600 2021-07-20
TYPO3 MEDIUM 5.4
CVE-2021-21365

Bootstrap Package is a theme for TYPO3. It has been discovered that rendering content in the website frontend is vulnerable to cross-site scripting. …

Fix: 7.1.2 / 8.0.8+
Fix from $1,600 2021-04-27
TYPO3 HIGH 8.6
CVE-2021-21355

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 8.7.40, 9.5.25, 10.4.14, 11.1.1, due to the lack of ensurin…

Fix: 8.7.40 / 9.5.25+
Fix from $1,950 2021-03-23
TYPO3 HIGH 8.3
CVE-2021-21357

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 8.7.40, 9.5.25, 10.4.14, 11.1.1 due to improper input valid…

Fix: 8.7.40 / 9.5.25+
Fix from $1,950 2021-03-23
TYPO3 HIGH 7.5
CVE-2021-21339

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 user sessio…

Fix: 6.2.57 / 7.6.51+
Fix from $1,950 2021-03-23
TYPO3 HIGH 7.5
CVE-2021-21359

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 9.5.25, 10.4.14, 11.1.1 requesting invalid or non-existing …

Fix: 9.5.25 / 10.4.14+
Fix from $1,950 2021-03-23