Approved changes feed: RSS · Atom

cpe:2.3:a:typo3:typo3:6.2.0:beta3:*:*:*:*:*:*

part: a version: 6.2.0 update: beta3

VendorTypo3 (bebcd01c-0947-5641-89ed-9b814cca944e)
ProductTypo3 (e0e75c36-ce92-5448-bdce-8b59acd8c849)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/typo3/typo3 purl2cpe 2026-06-01 10:16:08.686782
pkg:typo3/typo3.cms.git purl2cpe 2026-06-01 10:16:08.686784

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-4056 vulnerable 2026-06-08 05:07:46.603920 Details available
Cross-site scripting (XSS) vulnerability in the Backend component in TYPO3 6.2.x before 6.2.19 allows remote attackers to inject arbitrary web script or HTML via the module parameter when creating a bookmark.
Published: 2017-01-23T21:00:00.000Z
Updated: 2024-08-06T00:17:30.841Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8760 vulnerable 2026-06-08 05:07:04.841940 Details available
The Flvplayer component in TYPO3 6.2.x before 6.2.16 allows remote attackers to embed Flash videos from external domains via unspecified vectors, aka "Cross-Site Flashing."
Published: 2016-01-08T19:00:00.000Z
Updated: 2024-09-16T20:16:51.620Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8759 vulnerable 2026-06-08 05:07:04.840831 Details available
Cross-site scripting (XSS) vulnerability in the typoLink function in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote authenticated editors to inject arbitrary web script or HTML via a link field.
Published: 2016-01-08T19:00:00.000Z
Updated: 2024-09-16T19:10:11.966Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8758 vulnerable 2026-06-08 05:07:04.839722 Details available
Multiple cross-site scripting (XSS) vulnerabilities in unspecified frontend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary web script or HTML via unknown vectors.
Published: 2016-01-08T19:00:00.000Z
Updated: 2024-09-17T04:19:06.865Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8757 vulnerable 2026-06-08 05:07:04.832666 Details available
Cross-site scripting (XSS) vulnerability in the Extension Manager in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to extension data during an extension installation.
Published: 2016-01-08T19:00:00.000Z
Updated: 2024-09-16T22:46:11.762Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8756 vulnerable 2026-06-08 05:07:04.831668 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8755 vulnerable 2026-06-08 05:07:04.814142 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5956 vulnerable 2026-06-08 05:06:51.064410 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9509 vulnerable 2026-06-08 05:06:12.072878 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9508 vulnerable 2026-06-08 05:06:12.065187 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3946 vulnerable 2026-06-08 05:05:43.557984 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3944 vulnerable 2026-06-08 05:05:43.473383 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3943 vulnerable 2026-06-08 05:05:43.472397 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3941 vulnerable 2026-06-08 05:05:43.455976 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7074 vulnerable 2026-06-08 05:05:08.280188 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.