It has been discovered that the extension "phpMyAdmin" (phpmyadmin) is susceptible to Cross-Site Scripting.

It has been discovered that the extension "Dynamic Content Elements" (dce) is susceptible to Information Disclosure.

It has been discovered that the extension "fal_sftp" (fal_sftp) is susceptible to Improper Access Control.

It has been discovered that the extension "Calendar Base" (cal) is susceptible to Denial of Service.

It has been discovered that the extension "phpMyAdmin" (phpmyadmin) is susceptible to Cross-Site Scripting and Cross-Site Request Forgery.

It has been discovered that the extension "JobControl" (dmmjobcontrol) is susceptible to Cross-Site Scripting and SQL Injection.

Several vulnerabilities have been found in the following third-party TYPO3 extensions: cwt_feedit, eu_ldap, flatmgr, jh_opengraphprotocol, ke_dompdf,…

It has been discovered that the extension "News system" (news) is susceptible to Cross-Site Scripting

It has been discovered that the extension "Grid Elements" (gridelements) is susceptible to Cross-Site Scripting

It has been discovered that the extension "powermail" (powermail) is susceptible to arbitrary code execution and Cross-Site Scripting