[MEDIUM] Typo3 Cross-Site Scripting in Flash component (ELTS)

PKSA-76yg-j1z3-zysm CVE-2020-8091 GHSA-qvhv-pwww-53jj

Affected version: >=7.0.0,<=7.1.0|>=6.2.0,<=6.2.38

Reported by:
GitHub

[MEDIUM] Typo3 XSS Vulnerability

PKSA-j487-wgb6-g37w CVE-2018-6905 GHSA-3w22-wrwx-2r75

Affected version: <9.2.0

Reported by:
GitHub

Remote Code Execution in third party library swiftmailer

PKSA-y99p-vnsv-h8zb

Affected version: >=6.2.0,<6.2.30|>=7.6.0,<7.6.15|>=8.0.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.3.0|>=8.3.0,<8.4.0|>=8.4.0,<8.5.0|>=8.5.0,<8.5.1

Reported by:
FriendsOfPHP/security-advisories

Insecure Unserialize in TYPO3 Backend

PKSA-p9pn-ckkr-j9gj

Affected version: >=6.2.0,<6.2.29|>=7.6.0,<7.6.13|>=8.0.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.3.0|>=8.3.0,<8.4.0|>=8.4.0,<8.4.1

Reported by:
FriendsOfPHP/security-advisories

Path Traversal in TYPO3 Core

PKSA-ycv6-vk58-crph

Affected version: >=6.2.0,<6.2.29|>=7.6.0,<7.6.13|>=8.0.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.3.0|>=8.3.0,<8.4.0|>=8.4.0,<8.4.1

Reported by:
FriendsOfPHP/security-advisories

Cache Flooding in TYPO3 Frontend

PKSA-5nxh-6dvz-pwx2

Affected version: >=6.2.0,<6.2.27|>=7.6.0,<7.6.11|>=8.0.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.3.0|>=8.3.0,<8.3.1

Reported by:
FriendsOfPHP/security-advisories

Cross-Site Scripting in TYPO3 Backend

PKSA-p1xw-bm9t-9mgz

Affected version: >=6.2.0,<6.2.27|>=7.6.0,<7.6.11|>=8.0.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.3.0|>=8.3.0,<8.3.1

Reported by:
FriendsOfPHP/security-advisories