It has been discovered that TYPO3 Core is vulnerable to Cross-Site Scripting (XSS), Open Redirection, SQL Injection, Broken Authentication and Session Management, Insecure Randomness, Information Disclosure and Arbitrary Code Execution.
Please read this advisory for a description and solutions of all the above mentioned issues: