Search for packages
| purl | pkg:composer/typo3/cms-form@10.4.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-hwvq-2w67-rvxp
Aliases: CVE-2026-47346 |
TYPO3 CMS has Broken Access Control in its Form Framework ### Problem Backend users with file write permissions were able … | There are no reported fixed by versions. |
|
GHSA-pjpj-v387-x4vq
Aliases: CVE-2026-11607 |
TYPO3 CMS has Broken Access Control in its Form Framework ### Problem Backend users with access to the Form Framework … | There are no reported fixed by versions. |
|
CVE-2024-55922
Aliases: GHSA-ww7h-g2qf-7xv6 |
TYPO3 Form Framework Module vulnerable to Cross-Site Request Forgery ### Problem A vulnerability has been identified in the backend user … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-3vg7-jw9m-pc3f
Aliases: CVE-2021-21357 |
Broken Access Control in Form Framework ### Problem Due to improper input validation, attackers can by-pass restrictions of predefined options … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-x79j-wgqv-g8h2
Aliases: CVE-2021-21358 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in typo3/cms-form ### Problem It has been discovered that the … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-2r6j-862c-m2v2
Aliases: CVE-2021-21355 |
Unrestricted File Upload in Form Framework ### Problem Due to the lack of ensuring file extensions belong to configured allowed … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-ww7h-g2qf-7xv6
Aliases: CVE-2024-55922 |
TYPO3 Form Framework Module vulnerable to Cross-Site Request Forgery ### Problem A vulnerability has been identified in the backend user … |
Vulnerable Vulnerable |