Approved changes feed: RSS · Atom

cpe:2.3:a:typo3:typo3:6.2.0:beta5:*:*:*:*:*:*

part: a version: 6.2.0 update: beta5

VendorTypo3 (bebcd01c-0947-5641-89ed-9b814cca944e)
ProductTypo3 (e0e75c36-ce92-5448-bdce-8b59acd8c849)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/typo3/typo3 purl2cpe 2026-06-01 10:16:08.686788
pkg:typo3/typo3.cms.git purl2cpe 2026-06-01 10:16:08.686789

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-4056 vulnerable 2026-06-08 05:07:46.605092 Details available
Cross-site scripting (XSS) vulnerability in the Backend component in TYPO3 6.2.x before 6.2.19 allows remote attackers to inject arbitrary web script or HTML via the module parameter when creating a bookmark.
Published: 2017-01-23T21:00:00.000Z
Updated: 2024-08-06T00:17:30.841Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8760 vulnerable 2026-06-08 05:07:04.841971 Details available
The Flvplayer component in TYPO3 6.2.x before 6.2.16 allows remote attackers to embed Flash videos from external domains via unspecified vectors, aka "Cross-Site Flashing."
Published: 2016-01-08T19:00:00.000Z
Updated: 2024-09-16T20:16:51.620Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8759 vulnerable 2026-06-08 05:07:04.840867 Details available
Cross-site scripting (XSS) vulnerability in the typoLink function in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote authenticated editors to inject arbitrary web script or HTML via a link field.
Published: 2016-01-08T19:00:00.000Z
Updated: 2024-09-16T19:10:11.966Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8758 vulnerable 2026-06-08 05:07:04.839755 Details available
Multiple cross-site scripting (XSS) vulnerabilities in unspecified frontend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary web script or HTML via unknown vectors.
Published: 2016-01-08T19:00:00.000Z
Updated: 2024-09-17T04:19:06.865Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8757 vulnerable 2026-06-08 05:07:04.832699 Details available
Cross-site scripting (XSS) vulnerability in the Extension Manager in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to extension data during an extension installation.
Published: 2016-01-08T19:00:00.000Z
Updated: 2024-09-16T22:46:11.762Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8756 vulnerable 2026-06-08 05:07:04.831703 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8755 vulnerable 2026-06-08 05:07:04.815276 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.