Dated News Project: Security Vulnerabilities
The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows SQL Injection.
CVSS Score
9.8
EPSS Score
0.006
Published
2021-08-13
The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows XSS.
CVSS Score
6.1
EPSS Score
0.005
Published
2021-08-13
The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data.
CVSS Score
5.3
EPSS Score
0.002
Published
2021-08-13
The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 has incorrect Access Control for confirming various applications.
CVSS Score
7.2
EPSS Score
0.002
Published
2021-08-13