https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T12:20:43.082733+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-34356 CVE-2024-34356 — TYPO3 vulnerable to Cross-Site Scripting in the Form Manager Module 2026-10-12T12:20:43.084022+00:00

Affected: typo3

TYPO3 is an enterprise content management system. Starting in version 9.0.0 and prior to versions 9.5.48 ELTS, 10.4.45 ELTS, 11.5.37 LTS, 12.4.15 LTS, and 13.1.1, the form manager backend module is vulnerable to cross-site scripting. Exploiting this vulnerability requires a valid backend user account with access to the form module. TYPO3 versions 9.5.48 ELTS, 10.4.45 ELTS, 11.5.37 LTS, 12.4.15 LTS, and 13.1.1 fix the problem described.