[ Vendor · 16 CVEs ]
TYPO3
CVEs affecting TYPO3 published in the last 30 days, plus any TYPO3 CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-113442 | 20 Oct 2026 | CVSS 5.3 | TYPO3 Extension "TYPO3 Fluid-Form by coding.ms"Values entered by visitors were placed into the HTML summary email without being escaped. An unauthenticated attacker could use this to inject HTML… | |
| CVE-2026-113459 | 20 Oct 2026 | CVSS 7.1 | TYPO3 Extension "TYPO3 AI Integration Extension"In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so that the editor plugin can contact the… | |
| CVE-2026-113468 | 20 Oct 2026 | CVSS 6.9 | TYPO3 Extension "TYPO3 Shop by coding.ms"The payment notification endpoint for PayPal accepts incoming data without verifying that it comes from the payment provider. Any site visitor can… | |
| CVE-2026-112068 | 20 Oct 2026 | CVSS 5.3 | TYPO3 Extension "Analytics"The backend module does not check whether a backend user has access to the requested site. Users with access to the module can therefore open the… | |
| CVE-2026-112069 | 20 Oct 2026 | CVSS 6.3 | TYPO3 Extension "FAL Protect"The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These files were served… | |
| CVE-2026-112070 | 20 Oct 2026 | CVSS 5.3 | TYPO3 Extension "Analytics"The AJAX routes of the extension do not check whether a backend user has access to the related module or dashboard widget. Any backend user can… | |
| CVE-2026-112071 | 20 Oct 2026 | CVSS 6.9 | TYPO3 Extension "TYPO3 Shop by coding.ms"The order cancellation function accepts an order identifier from the request and acts on that order without checking that the caller owns it. Any… | |
| CVE-2026-112237 | 20 Oct 2026 | CVSS 6.9 | TYPO3 Extension "Kitodo.Presentation"The extension provides a public proxy endpoint that fetches a URL on behalf of the visitor. For one HTTP request method, the endpoint does not apply… | |
| CVE-2026-112238 | 20 Oct 2026 | CVSS 8.7 | TYPO3 Extension "File manager"The file search of the extension builds its database conditions by wrapping the search term in quotes itself. Only the wildcard characters of the… | |
| CVE-2026-112239 | 20 Oct 2026 | CVSS 7.2 | TYPO3 Extension "TYPO3 AI Integration Extension"The extension provides a backend endpoint that writes a submitted value into a submitted field of a submitted page record. It neither checks the… | |
| CVE-2026-112240 | 20 Oct 2026 | CVSS 6.3 | TYPO3 Extension "TYPO3 Fluid-Form by coding.ms"The download link for files uploaded through a form relied on a token that could be predicted. The file name in the request was also not verified in… | |
| CVE-2026-112064 | 20 Oct 2026 | CVSS 7.1 | TYPO3 Extension "sgalinski Cookie Consent"The backend module for reviewing the consent history accepted sorting, grouping and index options from the request and used them in a database query… | |
| CVE-2026-112065 | 20 Oct 2026 | CVSS 5.3 | TYPO3 Extension "sgalinski Cookie Consent"The routes that provide consent history and statistics data did not check whether the backend user had access to the module or to the requested page… | |
| CVE-2026-112066 | 20 Oct 2026 | CVSS 7.1 | TYPO3 Extension "sgalinski Cookie Consent"The JSON import of the cookie consent configuration did not respect the backend user's permissions. Non-admin backend users with access to the module… | |
| CVE-2026-112067 | 20 Oct 2026 | CVSS 6.9 | TYPO3 Extension "Accessible Form Captcha"The extension hides the correct answer to each CAPTCHA inside the image data of the CAPTCHA itself. Anyone who can request a CAPTCHA image can read… | |
| CVE-2026-109162 | 13 Oct 2026 | CVSS 6.3 | TYPO3 CMSForms using FileUpload or ImageUpload elements with a custom saveToFileMount configured stored uploaded files in the default storage folder… | Fix |