CVE-2020-15516

The mmforum extension through 1.9.5 for TYPO3 allows XSS that can be exploited via CSRF...

PT-2020-14473

Name of the Vulnerable Software and Affected Versions mm forum extension for TYPO3 versions through 1.9.5 Description The issue allows for XSS that can be exploited via CSRF. Recommendations For versions through 1.9.5, update to a version later than 1.9.5 to resolve the issue...

PT-2014-7142

Name of the Vulnerable Software and Affected Versions TYPO3 mm forum extension versions prior to 1.9.3 Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension. This is achieved by accessing the uploaded file via unspecified vectors...

PT-2014-7143

Name of the Vulnerable Software and Affected Versions TYPO3 mm forum extension versions prior to 1.9.3 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for creating posts. Recommendations For versions prior to 1.9.3, update to version 1.9.3...

PT-2014-7141

Name of the Vulnerable Software and Affected Versions TYPO3 mm forum extension versions prior to 1.9.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 1.9.3, update to version 1.9.3 or later to...