CVE-2025-48207

The reintdownloadmanager extension through 5.0.0 for TYPO3 allows Insecure Direct Object Reference...

CVE-2025-48200

The srfeuserregister extension through 12.4.8 for TYPO3 allows Remote Code Execution...

CVE-2025-48206

The nsbackup extension through 13.0.0 for TYPO3 allows XSS...

CVE-2025-48202

The CVE-2025-48202 entry applies to the TYPO3 femanager extension (versions up to 8.2.1). The vulnerability is an Insecure Direct Object Reference (IDOR) in the newAction of the newController, allowing attackers to view frontend user data via a user parameter. Root cause is unsafe direct object r...

PT-2025-22375

Name of the Vulnerable Software and Affected Versions TYPO3 ns backup extension versions prior to 13.0.1 Description The issue allows for XSS. Recommendations For versions prior to 13.0.1, update to version 13.0.1 or later to resolve the issue...

CVE-2025-48200

The CVE-2025-48200 issue affects the Front End User Registration extension (sr_feuser_register) for TYPO3 up to version 12.4.8 and causes Remote Code Execution. Root cause: unsafe deserialization in the extension. Exploitation details are not provided in the core initial doc, but multiple connect...

CVE-2025-48202

The femanager extension through 8.2.1 for TYPO3 allows Insecure Direct Object Reference...

PT-2025-22419

Name of the Vulnerable Software and Affected Versions SeedDMS version 6.0.32 Description A vulnerability in SeedDMS allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the zip import functionality in the Extension Manager. Recommendations For SeedDMS version 6.0.3...

CVE-2025-48201

The CVE-2025-48201 entry concerns the TYPO3 ns_backup (Backup Plus) extension up to version 13.0.0, which exposes a Predictable Resource Location. The vulnerability allows an unauthenticated remote user to download created backups and configuration files, due to predictable resource paths. Affect...

PT-2025-22372

Name of the Vulnerable Software and Affected Versions cs seo extension versions prior to 9.2.1 Description The issue concerns a cross-site scripting XSS vulnerability. It allows backend users to execute arbitrary scripts via the JSON-LD output. Recommendations For versions prior to 9.2.1, update ...

CVE-2025-48205

The CVE-2025-48205 entry concerns the sr_feuser_register extension for TYPO3 (up to version 12.4.8). The root cause is an Insecure Direct Object Reference that allows attackers to read arbitrary files. Impact is a high-severity exposure of potentially sensitive information. Public references in c...

CVE-2025-48204

The nsbackup extension through 13.0.0 for TYPO3 allows command injection...

CVE-2025-48204

The nsbackup extension through 13.0.0 for TYPO3 allows command injection...

CVE-2025-48206

The CVE-2025-48206 entry concerns the TYPO3 Backup Plus (ns_backup) extension. Public data confirms an XSS vulnerability in ns_backup up to and including version 13.0.0, caused by improper input handling within the extension. Affected component/file: the ns_backup extension for TYPO3; impact is C...

CVE-2025-48201

The nsbackup extension through 13.0.0 for TYPO3 has a Predictable Resource Location...

CVE-2025-48206

The nsbackup extension through 13.0.0 for TYPO3 allows XSS...

CVE-2025-48203

The CVE-2025-48203 entry concerns the TYPO3 cs_seo extension. Affected software: cs_seo extension (TYPO3) up to version 9.2.0. Root cause: Cross-site scripting (XSS) vulnerability arising in the extension’s handling of JSON-LD output. Impact: allows execution of arbitrary scripts, via backend or ...

CVE-2025-48203

The csseo extension through 9.2.0 for TYPO3 allows XSS...

CVE-2025-48203

The csseo extension through 9.2.0 for TYPO3 allows XSS...

CVE-2025-48202

The femanager extension through 8.2.1 for TYPO3 allows Insecure Direct Object Reference...