Read the docs

TYPO3

Records412All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical15CVSS 9.0–10.0
CVSS high132CVSS 7.0–8.9

Exploited now

TYPO3 records in CISA KEV

No TYPO3 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Typo3 218 records HIGH Dam Frontend Extension 4 records MEDIUM Html Sanitizer 4 records LOW Wec Discussion Forum 4 records LOW Pdf Generator 2 Extension 3 records LOW Address Directory 2 records LOW Air Filemanager 2 records MEDIUM Beuserswitch 2 records LOW

Records

4 records in Html Sanitizer · all components

TI-2022-16445 CVE-2022-36020 · GHSA-47m6-46mj-p235

Bypass of Cross-Site Scripting Protection in typo3/html-sanitizer

Priority LOW 29

The typo3/html-sanitizer package is an HTML sanitizer, written in PHP, aiming to provide XSS-safe markup based on explicitly allowed tags, attributes and values.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00842 Published 2022-09-13 Fixed in 1.0.7, 2.0.16 +2 CWE-79
TI-2023-19880 CVE-2023-38500 · GHSA-59jf-3q9v-rh6g

By-passing Cross-Site Scripting Protection in HTML Sanitizer

Priority LOW 28

TYPO3 HTML Sanitizer is an HTML sanitizer, written in PHP, aiming to provide cross-site-scripting-safe markup based on explicitly allowed tags, attributes and values.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00508 Published 2023-07-25 Fixed in 1.5.1, 2.1.2 CWE-79
TI-2022-07558 CVE-2022-23499 · GHSA-hvwx-qh2h-xcfj

Cross-Site Scripting Protection bypass in HTML Sanitizer

Priority LOW 28

HTML sanitizer is written in PHP, aiming to provide XSS-safe markup based on explicitly allowed tags, attributes and values.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00468 Published 2022-12-13 Fixed in 1.5.0, 2.1.1 +3 CWE-79
Open these records in search →