Approved changes feed: RSS · Atom

cpe:2.3:a:typo3:typo3:6.2.0:beta1:*:*:*:*:*:*

part: a version: 6.2.0 update: beta1

VendorTypo3 (bebcd01c-0947-5641-89ed-9b814cca944e)
ProductTypo3 (e0e75c36-ce92-5448-bdce-8b59acd8c849)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/typo3/typo3 purl2cpe 2026-06-01 10:16:08.686777
pkg:typo3/typo3.cms.git purl2cpe 2026-06-01 10:16:08.686778

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-4056 vulnerable 2026-06-08 05:07:46.602855 Details available
Cross-site scripting (XSS) vulnerability in the Backend component in TYPO3 6.2.x before 6.2.19 allows remote attackers to inject arbitrary web script or HTML via the module parameter when creating a bookmark.
Published: 2017-01-23T21:00:00.000Z
Updated: 2024-08-06T00:17:30.841Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8760 vulnerable 2026-06-08 05:07:04.841908 Details available
The Flvplayer component in TYPO3 6.2.x before 6.2.16 allows remote attackers to embed Flash videos from external domains via unspecified vectors, aka "Cross-Site Flashing."
Published: 2016-01-08T19:00:00.000Z
Updated: 2024-09-16T20:16:51.620Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8759 vulnerable 2026-06-08 05:07:04.840798 Details available
Cross-site scripting (XSS) vulnerability in the typoLink function in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote authenticated editors to inject arbitrary web script or HTML via a link field.
Published: 2016-01-08T19:00:00.000Z
Updated: 2024-09-16T19:10:11.966Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8758 vulnerable 2026-06-08 05:07:04.839688 Details available
Multiple cross-site scripting (XSS) vulnerabilities in unspecified frontend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary web script or HTML via unknown vectors.
Published: 2016-01-08T19:00:00.000Z
Updated: 2024-09-17T04:19:06.865Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8757 vulnerable 2026-06-08 05:07:04.832633 Details available
Cross-site scripting (XSS) vulnerability in the Extension Manager in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to extension data during an extension installation.
Published: 2016-01-08T19:00:00.000Z
Updated: 2024-09-16T22:46:11.762Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8756 vulnerable 2026-06-08 05:07:04.831633 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8755 vulnerable 2026-06-08 05:07:04.813092 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5956 vulnerable 2026-06-08 05:06:51.063469 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9509 vulnerable 2026-06-08 05:06:12.072846 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9508 vulnerable 2026-06-08 05:06:12.064175 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3946 vulnerable 2026-06-08 05:05:43.557949 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3944 vulnerable 2026-06-08 05:05:43.473349 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3943 vulnerable 2026-06-08 05:05:43.472366 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3941 vulnerable 2026-06-08 05:05:43.454977 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7074 vulnerable 2026-06-08 05:05:08.279076 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.