Lucene search
TYPO3 AssociationTYPO3-EXT-SA-2020-013HistoryJul 07, 2020 - 12:00 a.m.
Multiple vulnerabilities in extension "mm_forum" (mm_forum)
2020-07-0700:00:00
TYPO3 Association
typo3.org
10
0.001 Low
EPSS
Percentile
21.7%
The extension fails to properly encode user input for output in HTML context. Also the extension fails to implement a CSRF protection for update profile plugin.
Related
nvd
nvd
CVE-2020-15516
2020-07-07 14:15:11
cvelist
cvelist
CVE-2020-15516
2020-07-07 13:46:10
cve
cve
CVE-2020-15516
2020-07-07 14:15:11
prion
prion
Cross site request forgery (csrf)
2020-07-07 14:15:00