TYPO3 / Typo3.cms
16 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2021-32768 | Cross-Site Scripting via Rich-Text Content | MEDIUM | 6.1 | Aug 10, 2021 |
| CVE-2021-32767 | Information Disclosure in User Authentication | MEDIUM | 6.5 | Jul 20, 2021 |
| CVE-2021-32669 | Cross-Site Scripting in Backend Grid View | MEDIUM | 6.4 | Jul 20, 2021 |
| CVE-2021-32668 | Cross-Site Scripting in Query Generator & Query View | MEDIUM | 6.4 | Jul 20, 2021 |
| CVE-2021-32667 | Cross-Site Scripting in Page Preview | MEDIUM | 6.4 | Jul 20, 2021 |
| CVE-2021-21359 | Denial of Service in Page Error Handling | HIGH | 7.5 | Mar 23, 2021 |
| CVE-2021-21370 | Cross-Site Scripting in Content Preview (CType menu) | MEDIUM | 5.4 | Mar 23, 2021 |
| CVE-2021-21339 | Cleartext storage of session identifier | HIGH | 7.5 | Mar 23, 2021 |
| CVE-2021-21340 | Cross-Site Scripting in Content Preview | MEDIUM | 5.4 | Mar 23, 2021 |
| CVE-2021-21355 | Unrestricted File Upload in Form Framework | HIGH | 8.6 | Mar 23, 2021 |
| CVE-2021-21357 | Broken Access Control in Form Framework | HIGH | 8.3 | Mar 23, 2021 |
| CVE-2021-21358 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in typo3/cms-form | MEDIUM | 5.4 | Mar 23, 2021 |
| CVE-2021-21338 | Open Redirection in Login Handling | MEDIUM | 6.1 | Mar 23, 2021 |
| CVE-2020-26229 | XML External Entity in Dashboard Widget | LOW | 3.7 | Nov 23, 2020 |
| CVE-2020-26228 | Cleartext storage of session identifier | HIGH | 8.1 | Nov 23, 2020 |
| CVE-2020-26227 | Cross-Site Scripting in Fluid view helpers | MEDIUM | 6.1 | Nov 23, 2020 |
Showing 1 to 16 of 16 CVEs