Skip to content
OpenAdvisories

Vendor

TYPO3

198 known vulnerabilities.

Products

typo3 58 TYPO3 CMS 54 HTML Sanitizer 6 Extension "Mail" 6 Extension "femanager" 5 Extension "Apache Solr for TYPO3 - Enterprise Search" 5 Extension "Faceted Search" 3 Extension "sgalinski Cookie Consent" 3 femanager 3 ns backup extension 3 Fluid 2 Extension "SYSSY - TYPO3 Monitoring & Security Checks" 2 Extension "TYPO3 AI Integration Extension" 2 Extension "TYPO3 Fluid-Form by coding.ms" 2 Extension "TYPO3 Shop by coding.ms" 2 Extension "Event management and registration" 2 Extension "Events 2" 2 Extension "Modules" 2 Extension "powermail" 2 Extension "Frontend User Registration" 2 Extension "Analytics" 2 sr feuser register extension 2 Extension "Mailqueue" 2 Extension "Redirect Tabs" 1 cms-rte-ckeditor 1 Extension "Forum" 1 femanager extension 1 Extension "Forms Export" 1 Extension "Address List" 1 Extension "Industry Directory" 1 Extension "News system" 1 oidc 1 Extension "E-Mail MFA Provider" 1 Extension "Accessible Form Captcha" 1 Extension "Telephone Directory" 1 Extension "Mask" 1 Extension "File manager" 1 Extension "Form to Database" (form_to_database) 1 Extension "Club Directory" 1 Extension "FAL Protect" 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-112071 Public exploit

    Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)

    The order cancellation function accepts an order identifier from the request and acts on that order without checking that the caller owns it. Any site visitor can set orders that are still awaiting payment to "canceled". This requires a page that contains the…

    TYPO3 Extension "TYPO3 Shop by coding.ms" Web / CMS
  • Medium 6.9
    CVE-2026-113468 Public exploit

    Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)

    The payment notification endpoint for PayPal accepts incoming data without verifying that it comes from the payment provider. Any site visitor can overwrite the stored payment notification of an order that is still awaiting payment with arbitrary content. Thi…

    TYPO3 Extension "TYPO3 Shop by coding.ms" Web / CMS
  • Medium 6.3
    CVE-2026-56096 Public exploit

    Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)

    The extension passes the user-supplied search query parameter to Apache Solr without restricting advanced Solr query syntax such as wildcards, field selectors and range queries. A remote, unauthenticated attacker can use this syntax to enumerate indexed field…

    TYPO3 Extension "Apache Solr for TYPO3 - Enterprise Search" Web / CMS
  • High 8.2
    CVE-2026-8726 Public exploit

    SQL Injection in extension "News system" (news)

    The extension fails to properly sanitize user input before using it in a database query. As a result, an unauthenticated attacker can inject arbitrary SQL through a URL parameter on pages using the "Date Menu of news articles" plugin. Exploitation requires th…

    TYPO3 Extension "News system" georgringer/news Packagist
  • Medium 4.7
    CVE-2023-47125 Public exploit

    By-passing Cross-Site Scripting Protection in HTML Sanitizer

    TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions DOM processing instructions are not handled correctly. This allows bypassing the cross-site scripting mechanism of typo3/html-sanitizer. This vuln…

    TYPO3 HTML Sanitizer typo3/html-sanitizer Packagist