TYPO3 "Form to Database" extension susceptible to Cross-site Scripting

🗓️ 16 Sep 2025 15:32:34Reported by GitHub Advisory DatabaseType

github

github🔗 github.com👁 4 Views

TYPO3 Form to Database has a cross-site scripting vulnerability in multiple versions.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2025-10316	16 Sep 202509:42	–	circl
CNNVD	TYPO3 Form to Database 安全漏洞	16 Sep 202500:00	–	cnnvd
CVE	CVE-2025-10316	16 Sep 202509:09	–	cve
Cvelist	CVE-2025-10316 Cross-Site Scripting in extension "Form to Database" (form_to_database)	16 Sep 202509:09	–	cvelist
EUVD	EUVD-2025-29543	3 Oct 202520:07	–	euvd
NVD	CVE-2025-10316	16 Sep 202509:15	–	nvd
OSV	GHSA-54PG-2X9H-CMX8 TYPO3 "Form to Database" extension susceptible to Cross-site Scripting	16 Sep 202515:32	–	osv
Positive Technologies	PT-2025-37914	16 Sep 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-10316	18 Sep 202509:28	–	redhatcve
Snyk	Cross-site Scripting (XSS)	16 Sep 202509:43	–	snyk

Vulners

Node

lavitto typo3-form-to-databaseRange5.0.0–5.0.2composer

OR

lavitto typo3-form-to-databaseRange4.0.0–4.2.3composer

OR

lavitto typo3-form-to-databaseRange3.0.0–3.2.2composer

OR

lavitto typo3-form-to-databaseRange<2.2.5composer

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-10316
typo3	www.typo3.org/security/advisory/typo3-ext-sa-2025-012
gitlab	www.gitlab.com/lavitto/typo3-form-to-database/-/commit/a3ab9bf9c04061d1841fff96a08c4dbf48aaaf37
gitlab	www.gitlab.com/lavitto/typo3-form-to-database/-/issues/135
github	www.github.com/advisories/GHSA-54pg-2x9h-cmx8

16 Sep 2025 19:34Current

6.9Medium risk

Vulners AI Score6.9

CVSS 42.3

EPSS0.0008

SSVC

typo3 form to database cross site scripting version ranges