Dynamic Content Elements Project - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2021-04-28.

Products

• Dynamic Content Elements - 2 CVEs

Newest CVEs of Dynamic Content Elements Project

• CVE-2021-31777 - CVSS 4.9 (medium), 2021-04-28: The dce (aka Dynamic Content Element) extension 2.2.0 through 2.6.x before 2.6.2, and 2.7.x before 2.7.1, for TYPO3 allows SQL Injection via a backend user…
• CVE-2014-8328 - CVSS 5.3 (medium), 2020-02-03: The default configuration in the Dynamic Content Elements (dce) extension before 0.11.5 for TYPO3 allows remote attackers to obtain sensitive installation…