Search for packages
| purl | pkg:composer/typo3/cms-core@7.1.0 |
| Tags | Ghost |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-5z59-dn7p-xbc5
Aliases: GHSA-g4c9-qfvw-fmr4 |
TYPO3 Cross-Site Scripting in Backend Modal Component Failing to properly encode user input, notifications shown in modal windows in the TYPO3 backend are vulnerable to cross-site scripting. A valid backend user account is needed in order to exploit this vulnerability. |
Affected by 0 other vulnerabilities. Affected by 59 other vulnerabilities.
This version is affected by these other vulnerabilities:
Affected by 88 other vulnerabilities.
This version is affected by these other vulnerabilities:
|
|
VCID-ampc-h88c-afh2
Aliases: CVE-2016-5091 GHSA-jxg5-35fj-ccwf |
Information Exposure Extbase in TYPO3 allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted Extbase action. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-re9h-ze98-rbhu
Aliases: CVE-2020-8091 GHSA-qvhv-pwww-53jj |
Typo3 Cross-Site Scripting in Flash component (ELTS) TYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to 7.1.0 included a vulnerable external component, which could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system. |
Affected by 84 other vulnerabilities.
This version is affected by these other vulnerabilities:
|
|
VCID-rwqs-3ktq-qqbd
Aliases: GHSA-8c25-vj2w-p72j |
TYPO3 Cross-Site Scripting in Frontend User Login Failing to properly encode user input, login status display is vulnerable to cross-site scripting in the website frontend. A valid user account is needed in order to exploit this vulnerability - either a backend user or a frontend user having the possibility to modify their user profile. Template patterns that are affected are - ###FEUSER_[fieldName]### using system extension felogin - <!--###USERNAME###--> for regular frontend rendering (pattern can be defined individually using TypoScript setting config.USERNAME_substToken) |
Affected by 0 other vulnerabilities. Affected by 59 other vulnerabilities.
This version is affected by these other vulnerabilities:
Affected by 88 other vulnerabilities.
This version is affected by these other vulnerabilities:
|
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||