5. 

   Cross-Site Scripting in Fluid ViewHelpers

   Component Type: TYPO3 CMS Vulnerable subcomponent: Fluid (ext:fluid) Release Date: January 22, 2019 Vulnerability Type: Cross-Site Scripting Affected Versions: 8.0.0-8.7.22 and 9.0.0-9.5.3 Severity:…

   Published: 22nd January 2019
6. 

   Cross-Site Scripting in Language Pack Handling

   Component Type: TYPO3 CMS Vulnerable subcomponent: Language Pack Handling (ext:install) Release Date: January 22, 2019 Vulnerability Type: Cross-Site Scripting Affected Versions: 9.2.0-9.5.3 Severity:…

   Published: 22nd January 2019
7. 

   Security Misconfiguration for Backend User Accounts

   Component Type: TYPO3 CMS Vulnerable subcomponent: Backend User Account Model (ext:core) Release Date: January 22, 2019 Vulnerability Type: Security Misconfiguration Affected Versions: 8.0.0-8.7.22…

   Published: 22nd January 2019
8. 

   Information Disclosure of Installed Extensions

   Component Type: TYPO3 CMS Vulnerable subcomponent: RequireJS package configuration Release Date: January 22, 2019 Vulnerability Type: Information Disclosure Affected Versions: 8.0.0-8.7.22 and…

   Published: 22nd January 2019
9. 

   Possible Arbitrary Code Execution in CommandUtility API

   Release Date: January 22, 2019 Component Type: CommandUtility API (ext:core) Impact: Possible Arbitrary Code Execution Type: Advisory Problem Description It has been discovered that TYPO3 core API…

   Published: 22nd January 2019
10. 

    T3CON Membership Upgrade Campaign

    This campaign ended end of December 2018. Read more about TYPO3 Association memberships or become a member . Upgrading to Bronze Silver Gold Platinum Pin and ribbon with stars Possibility to win a…

    Published: 30th October 2018
11. 

    Cross-Site Scripting in Frontend User Login

    Component Type: TYPO3 CMS Vulnerable subcomponent: Frontend user login Release Date: December 11, 2018 Vulnerability Type: Cross-Site Scripting Affected Versions: 7.0.0-7.6.31, 8.0.0-8.7.20 and…

    Published: 11th December 2018 by Oliver Hader
12. 

    Cross-Site Scripting in Backend Modal Component

    Component Type: TYPO3 CMS Vulnerable subcomponent: Backend modal component Release Date: December 11, 2018 Vulnerability Type: Cross-Site Scripting Affected Versions: 7.1.0-7.6.31, 8.5.0-8.7.20 and…

    Published: 11th December 2018 by Oliver Hader
13. 

    Cross-Site Scripting in Online Media Asset Rendering

    Component Type: TYPO3 CMS Vulnerable subcomponent: Online media asset rendering Release Date: December 11, 2018 Vulnerability Type: Cross-Site Scripting Affected Versions: 7.5.0-7.6.31, 8.0.0-8.7.20…

    Published: 11th December 2018 by Oliver Hader
14. 

    Education Committee Spending 2019

    What is your idea about? The Education Committee is working on the TYPO3 certification program, the online certification platform and many other important tasks What is the potential impact of your…

    Published: 29th October 2018