Skip to content
OpenAdvisories

Package · Packagist

typo3/cms-form

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-15305

    TYPO3 CMS - Unrestricted File Upload in Form Framework

    Users were able to upload files with arbitrary MIME types to forms using FileUpload or ImageUpload elements with allowedMimeTypes configured. The restriction was not enforced server-side because the MimeTypeValidator was registered during form building before…

    TYPO3 TYPO3 CMS typo3/cms-form Web / CMS Packagist
  • Medium 5.4
    CVE-2024-55922

    Cross-Site Request Forgery in Form Framework Module in TYPO3

    TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery (CSRF). Additiona…

    TYPO3 typo3 typo3/cms-form Web / CMS Packagist
  • Medium 5.4
    CVE-2021-21358

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in typo3/cms-form

    TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 10.4.14, 11.1.1 it has been discovered that the Form Designer backend module of the Form Framework is vulnerable to cross-site scripting. A valid backend user account wi…

    TYPO3 TYPO3 CMS typo3/cms typo3/cms-core Web / CMS Packagist