It has been discovered that the extension "JobControl" (dmmjobcontrol) is susceptible to Cross-Site Scripting and SQL Injection.

Several vulnerabilities have been found in the following third-party TYPO3 extensions: cwt_feedit, eu_ldap, flatmgr, jh_opengraphprotocol, ke_dompdf,…

It has been discovered that the extension "News system" (news) is susceptible to Cross-Site Scripting

It has been discovered that the extension "Grid Elements" (gridelements) is susceptible to Cross-Site Scripting

It has been discovered that the extension "powermail" (powermail) is susceptible to arbitrary code execution and Cross-Site Scripting

It has been discovered that the extension "powermail" (powermail) is susceptible to Captcha Bypass

It has been discovered that the extensions "Yet Another Gallery" (yag) and "Tools for Extbase development" (pt_extbase) are susceptible to Access…

It has been discovered that the extension "Direct Mail Subscription" (direct_mail_subscription) is susceptible to Mass Assignment.

It has been discovered that the extension "News" (tt_news) is susceptible to Insecure Unserialize.

Several vulnerabilities have been found in the following third-party TYPO3 extensions: alpha_sitemap, femanager ke_stats, outstats, px_phpids, smarty,…