Approved changes feed: RSS · Atom

cpe:2.3:a:typo3:typo3:6.2.0:beta2:*:*:*:*:*:*

part: a version: 6.2.0 update: beta2

VendorTypo3 (bebcd01c-0947-5641-89ed-9b814cca944e)
ProductTypo3 (e0e75c36-ce92-5448-bdce-8b59acd8c849)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/typo3/typo3 purl2cpe 2026-06-01 10:16:08.686780
pkg:typo3/typo3.cms.git purl2cpe 2026-06-01 10:16:08.686781

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-4056 vulnerable 2026-06-08 05:07:46.603398 Details available
Cross-site scripting (XSS) vulnerability in the Backend component in TYPO3 6.2.x before 6.2.19 allows remote attackers to inject arbitrary web script or HTML via the module parameter when creating a bookmark.
Published: 2017-01-23T21:00:00.000Z
Updated: 2024-08-06T00:17:30.841Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8760 vulnerable 2026-06-08 05:07:04.841924 Details available
The Flvplayer component in TYPO3 6.2.x before 6.2.16 allows remote attackers to embed Flash videos from external domains via unspecified vectors, aka "Cross-Site Flashing."
Published: 2016-01-08T19:00:00.000Z
Updated: 2024-09-16T20:16:51.620Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8759 vulnerable 2026-06-08 05:07:04.840814 Details available
Cross-site scripting (XSS) vulnerability in the typoLink function in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote authenticated editors to inject arbitrary web script or HTML via a link field.
Published: 2016-01-08T19:00:00.000Z
Updated: 2024-09-16T19:10:11.966Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8758 vulnerable 2026-06-08 05:07:04.839705 Details available
Multiple cross-site scripting (XSS) vulnerabilities in unspecified frontend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary web script or HTML via unknown vectors.
Published: 2016-01-08T19:00:00.000Z
Updated: 2024-09-17T04:19:06.865Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8757 vulnerable 2026-06-08 05:07:04.832650 Details available
Cross-site scripting (XSS) vulnerability in the Extension Manager in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to extension data during an extension installation.
Published: 2016-01-08T19:00:00.000Z
Updated: 2024-09-16T22:46:11.762Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8756 vulnerable 2026-06-08 05:07:04.831651 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8755 vulnerable 2026-06-08 05:07:04.813620 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5956 vulnerable 2026-06-08 05:06:51.063947 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9509 vulnerable 2026-06-08 05:06:12.072862 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9508 vulnerable 2026-06-08 05:06:12.064696 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3946 vulnerable 2026-06-08 05:05:43.557967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3944 vulnerable 2026-06-08 05:05:43.473366 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3943 vulnerable 2026-06-08 05:05:43.472381 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3941 vulnerable 2026-06-08 05:05:43.455467 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7074 vulnerable 2026-06-08 05:05:08.279681 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.