typo3
Top products
Latest CVEs
The 15 most recently published vulnerabilities affecting typo3.
- CVE-2023-50462An issue was discovered in the content_consent (aka Content Consent) extension through 2.0.1 for TYPO3. It fails to verify whether a specified content element identifier is permitted by the plugin....5.3
- CVE-2023-50459An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. It fails to check access permissions for the edit user component. An authenticated frontend user can exploit this to e...5.4
- CVE-2023-50460An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. The backend module allows an authenticated backend user to perform various actions (userLogout, confirmUser, refuseUse...5.4
- CVE-2023-50461An issue was discovered in the direct_mail (aka Direct Mail) extension through 9.5.1 for TYPO3. The Configuration backend module of the extension allows an authenticated user to write to an arbitra...8.8
- CVE-2023-45023The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation component.4.2
- CVE-2026-77132TYPO3 CMS - Information Disclosure via Backend Localization Wizard
- CVE-2026-85400TYPO3 CMS - Missing Authorization in lowlevel commands
- CVE-2026-56092Broken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
- CVE-2026-56094Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
- CVE-2026-56093Broken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
- CVE-2026-56095Insecure Deserialization in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
- CVE-2026-56096Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
- CVE-2026-77127Information Disclosure in extension "Modules" (modules)
- CVE-2026-77128Broken Access Control in extension "Event management and registration" (sf_event_mgt)
- CVE-2026-77129Server-Side Template Injection in extension "Event management and registration" (sf_event_mgt)