Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/typo3/cms-core@9.5.36
purl pkg:composer/typo3/cms-core@9.5.36
Tags Ghost
Next non-vulnerable version 13.4.34
Latest non-vulnerable version 14.3.6
Risk score 2.8
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2022-36107
Aliases:
GHSA-9c6w-55cp-5w25
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') TYPO3 is an open source PHP based web content management …
10.4.32
Vulnerable
11.5.16
Vulnerable
10.4.32
Vulnerable
11.5.16
Vulnerable
CVE-2022-36105
Aliases:
GHSA-m392-235j-9r7r
Observable Discrepancy TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has …
10.4.32
Vulnerable
11.5.16
Vulnerable
10.4.32
Vulnerable
11.5.16
Vulnerable
GHSA-gqqf-g5r7-84vf
Aliases:
GMS-2022-4096
TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (5.7) ### Problem Due to a … There are no reported fixed by versions.
This package is not known to fix any advisories.