In2code - vulnerabilities (CVEs)
10 CVEs in 3 products, 0 in the last 30 days, newest from 2024-09-17.
Products
- Femanager - 5 CVEs
- Powermail - 4 CVEs
- Living User Experience - 1 CVEs
Newest CVEs of In2code
- CVE-2024-47047 - CVSS 7.5 (high), 2024-09-17: An issue was discovered in the powermail extension through 12.4.0 for TYPO3. It fails to validate the mail parameter of the createAction, resulting in…
- CVE-2024-45233 - CVSS 9.8 (critical), 2024-08-29: An issue was discovered in powermail extension through 12.3.5 for TYPO3. Several actions in the OutputController can directly be called, due to missing or…
- CVE-2024-45232 - CVSS 7.3 (high), 2024-08-29: An issue was discovered in powermail extension through 12.3.5 for TYPO3. It fails to validate the mail parameter of the confirmationAction, resulting in…
- CVE-2022-44543 - CVSS 5.3 (medium), 2023-12-12: The femanager extension before 5.5.2, 6.x before 6.3.3, and 7.x before 7.0.1 for TYPO3 allows creation of frontend users in restricted groups (if there is a…
- CVE-2023-25014 - CVSS 8.6 (high), 2023-02-02: An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the…
- CVE-2023-25013 - CVSS 8.6 (high), 2023-02-02: An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the…
- CVE-2022-35628 - CVSS 9.8 (critical), 2022-07-12: A SQL injection issue was discovered in the lux extension before 17.6.1, and 18.x through 24.x before 24.0.2, for TYPO3.
- CVE-2021-36787 - CVSS 5.4 (medium), 2021-08-13: The femanager extension before 5.5.1 and 6.x before 6.3.1 for TYPO3 allows XSS via a crafted SVG document.
- CVE-2014-6292 - CVSS 6.4 (medium), 2014-10-03: The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the records of other frontend users via unspecified vectors.
- CVE-2008-2182 - CVSS 4.3 (medium), 2008-05-13: Cross-site scripting (XSS) vulnerability in the powermail extension before 1.1.10 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via…
