13 matches found
CVE-2026-77137 SQL Injection in extension "Forms Export" (frp_form_answers)
The extension fails to properly sanitize user input before using it in a database query. As a result, a low-privileged backend user can inject arbitrary SQL through a URL parameter within the "Forms Export" backend module. Exploitation requires a low-privileged backend user and read access to the...
TYPO3-EXT-SA-2026-027: SQL Injection in extension "Forms Export" (frp_form_answers)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-027...
EUVD-2023-0771
Malicious code in bioql PyPI...
CVE-2023-26091
The frpformanswers aka Forms Export extension before 3.1.2, and 4.x before 4.0.2, for TYPO3 allows XSS via saved emails...
GHSA-Q3R2-23R8-WQR9 frp_form_answers allows Cross-site Scripting
The frpformanswers aka Forms Export extension before 3.1.2, and 4.x before 4.0.2, for TYPO3 allows XSS via saved emails...
frp_form_answers allows Cross-site Scripting
The frpformanswers aka Forms Export extension before 3.1.2, and 4.x before 4.0.2, for TYPO3 allows XSS via saved emails...
CVE-2023-26091
The frpformanswers aka Forms Export extension before 3.1.2, and 4.x before 4.0.2, for TYPO3 allows XSS via saved emails...
Design/Logic Flaw
The frpformanswers aka Forms Export extension before 3.1.2, and 4.x before 4.0.2, for TYPO3 allows XSS via saved emails...
CVE-2023-26091: Improper Neutralization of Input During Web Page Generation
The frpformanswers aka Forms Export extension before 3.1.2, and 4.x before 4.0.2, for TYPO3 allows XSS via saved emails...
CVE-2023-26091
The CVE-2023-26091 entry describes a Cross-Site Scripting (XSS) flaw in the TYPO3 extension frp_form_answers (Forms Export) affecting affected versions prior to 3.1.2 and 4.x prior to 4.0.2. The root cause is an XSS vulnerability via saved emails in the extension. Impact is user-controlled conten...
CVE-2023-26091
The frpformanswers aka Forms Export extension before 3.1.2, and 4.x before 4.0.2, for TYPO3 allows XSS via saved emails...