Vendor
TYPO3
198 known vulnerabilities.
Products
typo3 58
TYPO3 CMS 54
HTML Sanitizer 6
Extension "Mail" 6
Extension "femanager" 5
Extension "Apache Solr for TYPO3 - Enterprise Search" 5
Extension "Faceted Search" 3
Extension "sgalinski Cookie Consent" 3
femanager 3
ns backup extension 3
Fluid 2
Extension "SYSSY - TYPO3 Monitoring & Security Checks" 2
Extension "TYPO3 AI Integration Extension" 2
Extension "TYPO3 Fluid-Form by coding.ms" 2
Extension "TYPO3 Shop by coding.ms" 2
Extension "Event management and registration" 2
Extension "Events 2" 2
Extension "Modules" 2
Extension "powermail" 2
Extension "Frontend User Registration" 2
Extension "Analytics" 2
sr feuser register extension 2
Extension "Mailqueue" 2
Extension "Redirect Tabs" 1
cms-rte-ckeditor 1
Extension "Forum" 1
femanager extension 1
Extension "Forms Export" 1
Extension "Address List" 1
Extension "Industry Directory" 1
Extension "News system" 1
oidc 1
Extension "E-Mail MFA Provider" 1
Extension "Accessible Form Captcha" 1
Extension "Telephone Directory" 1
Extension "Mask" 1
Extension "File manager" 1
Extension "Form to Database" (form_to_database) 1
Extension "Club Directory" 1
Extension "FAL Protect" 1
1 result · Clear filters · Feed
-
High 8.2CVE-2026-8726 Public exploit
SQL Injection in extension "News system" (news)
The extension fails to properly sanitize user input before using it in a database query. As a result, an unauthenticated attacker can inject arbitrary SQL through a URL parameter on pages using the "Date Menu of news articles" plugin. Exploitation requires th…