Search for packages
| purl | pkg:composer/typo3/cms-core@7.1.0 |
| Tags | Ghost |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-8c25-vj2w-p72j
|
TYPO3 Cross-Site Scripting in Frontend User Login Failing to properly encode user input, login status display is vulnerable to cross-site … | There are no reported fixed by versions. |
|
GHSA-g4c9-qfvw-fmr4
|
TYPO3 Cross-Site Scripting in Backend Modal Component Failing to properly encode user input, notifications shown in modal windows in the … | There are no reported fixed by versions. |
|
CVE-2016-5091
|
Information Exposure Extbase in TYPO3 allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted … | There are no reported fixed by versions. |
|
CVE-2020-8091
|
Cross-site Scripting `svg.swf` in TYPO3 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a … |
Vulnerable |