CVE-2025-10316

The extension "Form to Database" is susceptible to Cross-Site Scripting. This issue affects the following versions: before 2.2.5, from 3.0.0 before 3.2.2, from 4.0.0 before 4.2.3, from 5.0.0 before 5.0.2.

Score

CVSS 4.0 2.3 Low

Status

Deferred - f4fb688c-4412-4426-b4b8-421ecf27b14a

Published

2025-09-16

Last modified

2025-09-16

Weaknesses

CWE-79

Affected products

• Extension Form To Database Form To Database (Typo3)

References

• https://typo3.org/security/advisory/typo3-ext-sa-2025-012