Vulnerabilities in TYPO3
198 resultsCVE-2026-47348MEDIUMTYPO3 CMS - Cross-Site Scripting in Indexed SearchEPSS 0.3%CVE-2026-120331MEDIUMServer-Side Request Forgery in extension "Mail" (mail)EPSS 0.3%CVE-2024-55924HIGHCross-Site Request Forgery in Scheduler Module in TYPO3EPSS 0.3%CVE-2025-59021MEDIUMTYPO3 CMS Allows Broken Access Control in Redirects ModuleEPSS 0.3%CVE-2026-15305MEDIUMTYPO3 CMS - Unrestricted File Upload in Form FrameworkEPSS 0.3%CVE-2026-47346HIGHTYPO3 CMS - Broken Access Control in Form FrameworkEPSS 0.3%CVE-2025-7900MEDIUMInsecure Direct Object Reference in extension "femanager" (femanager)EPSS 0.3%CVE-2024-55893MEDIUMTYPO3 Cross-Site Request Forgery in Log ModuleEPSS 0.3%CVE-2024-55894MEDIUMTYPO3 Cross-Site Request Forgery in Backend User ModuleEPSS 0.3%CVE-2024-55892MEDIUMPotential Open Redirect via Parsing Differences in TYPO3EPSS 0.2%CVE-2025-48203MEDIUMThe cs_seo extension through 9.2.0 for TYPO3 allows XSS.EPSS 0.2%CVE-2026-77131MEDIUMCleartext Transmission of Sensitive Information in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)EPSS 0.2%CVE-2026-49741HIGHTYPO3 CMS - Privilege Escalation & SQL Injection in Form FrameworkEPSS 0.2%CVE-2026-19418HIGHTYPO3 CMS - Broken Access Control in Backend and Install ToolEPSS 0.2%CVE-2025-48206MEDIUMThe ns_backup extension through 13.0.0 for TYPO3 allows XSS.EPSS 0.2%CVE-2026-47352MEDIUMTYPO3 CMS - Broken Access Control in Backend APIEPSS 0.2%CVE-2026-47349MEDIUMTYPO3 CMS - Broken Access Control in RecyclerEPSS 0.2%CVE-2026-11607HIGHTYPO3 CMS - Broken Access Control in Form FrameworkEPSS 0.2%CVE-2026-47343HIGHTYPO3 CMS - Destructive Actions on File Mount FoldersEPSS 0.2%CVE-2026-47350MEDIUMTYPO3 CMS - Broken Access Control in DataHandlerEPSS 0.2%