Cross-site scripting (XSS) vulnerability in the Store Locator extension before 1.2.8 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Search vulnerabilities
CVE-2009-4948
CVSS 2.0 · 4.3 Medium
EPSS 1.0%
KEV · Not listed
Vendors
Products
CVE-2009-4949
SQL injection vulnerability in the Store Locator extension before 1.2.8 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS 2.0 · 7.5 High
EPSS 1.1%
KEV · Not listed
Vendors
Products
CVE-2013-5303
Unspecified vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize."
CVSS 2.0 · 10.0 Critical
EPSS 1.9%
KEV · Not listed
Vendors
Products
CVE-2013-5304
SQL injection vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS 2.0 · 7.5 High
EPSS 1.4%
KEV · Not listed
Vendors
Products
CVE-2013-5305
Cross-site scripting (XSS) vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS 2.0 · 4.3 Medium
EPSS 1.3%
KEV · Not listed
Vendors
Products
Page 1 of 1.