Search for packages
| purl | pkg:composer/typo3/cms-core@7.1.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2ypz-t2ty-c3e3
Aliases: CVE-2020-8091 GHSA-qvhv-pwww-53jj |
Typo3 Cross-Site Scripting in Flash component (ELTS) TYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to 7.1.0 included a vulnerable external component, which could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system. |
Affected by 81 other vulnerabilities.
This version is affected by these other vulnerabilities:
|
|
VCID-7rsj-1mbz-2bc9
Aliases: GHSA-8c25-vj2w-p72j |
TYPO3 Cross-Site Scripting in Frontend User Login Failing to properly encode user input, login status display is vulnerable to cross-site scripting in the website frontend. A valid user account is needed in order to exploit this vulnerability - either a backend user or a frontend user having the possibility to modify their user profile. Template patterns that are affected are - ###FEUSER_[fieldName]### using system extension felogin - <!--###USERNAME###--> for regular frontend rendering (pattern can be defined individually using TypoScript setting config.USERNAME_substToken) |
Affected by 0 other vulnerabilities. Affected by 56 other vulnerabilities.
This version is affected by these other vulnerabilities:
Affected by 84 other vulnerabilities.
This version is affected by these other vulnerabilities:
|
|
VCID-a3y3-cwp9-zyd6
Aliases: CVE-2016-5091 GHSA-jxg5-35fj-ccwf |
Extbase for TYPO3 allows RCE Extbase in TYPO3 4.3.0 before 6.2.24, 7.x before 7.6.8, and 8.1.1 allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted Extbase action. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-p778-sd22-dfea
Aliases: GHSA-g4c9-qfvw-fmr4 |
TYPO3 Cross-Site Scripting in Backend Modal Component Failing to properly encode user input, notifications shown in modal windows in the TYPO3 backend are vulnerable to cross-site scripting. A valid backend user account is needed in order to exploit this vulnerability. |
Affected by 0 other vulnerabilities. Affected by 56 other vulnerabilities.
This version is affected by these other vulnerabilities:
Affected by 84 other vulnerabilities.
This version is affected by these other vulnerabilities:
|
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||