https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T15:46:23.584944+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2012-avi-181 certa-2012-avi-181 — Quatre vulnérabilités ont été corrigées dans TYPO3. 2026-10-19T15:46:23.588455+00:00 certa-2012-avi-181 https://cve.radiocsirt.org/vuln/euvd-2026-177624 EUVD-2026-177624 2026-10-19T15:46:23.588498+00:00 EUVD-2026-177624 https://cve.radiocsirt.org/vuln/fkie_cve-2012-1608 fkie_cve-2012-1608 2026-10-19T15:46:23.588520+00:00

The t3lib_div::RemoveXSS API method in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism and inject arbitrary web script or HTML via non printable characters.

 https://cve.radiocsirt.org/vuln/ghsa-w3v6-r62r-fvqh GHSA-w3v6-r62r-fvqh — Typo3 API XSS Vulnerabilities 2026-10-19T15:46:23.588562+00:00

Affected: Packagist: typo3/cms

The `t3lib_div::RemoveXSS` API method in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism and inject arbitrary web script or HTML via non printable characters.

 https://cve.radiocsirt.org/vuln/gsd-2012-1608 gsd-2012-1608 2026-10-19T15:46:23.588601+00:00 gsd-2012-1608 https://cve.radiocsirt.org/vuln/ubuntu-cve-2012-1608 Withdrawn: UBUNTU-CVE-2012-1608 2026-10-19T15:46:23.588620+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: typo3-src

The t3lib_div::RemoveXSS API method in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism and inject arbitrary web script or HTML via non printable characters.