Known vulnerabilities in Backup Plus

Vendor: TYPO3
Software: Backup Plus
Software CPE: cpe:2.3:a:typo3:backup_plus:*:*:*:*:*:*:*:*
Website: https://typo3.org/
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Backup Plus Backup Plus is affected by 4 known vulnerabilities: 2 medium, 2 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114742 - Command injection
CVE-2025-9573		 CWE-77 Low
No
No
 13.0.3 03.09.2025 SB2025090307
#VU109595 - Files or Directories Accessible to External Parties
CVE-2025-48206		 CWE-552 Medium
No
No
 13.0.1 21.05.2025 SB20250521110
#VU109593 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-48204		 CWE-79 Low
No
No
 13.0.1 21.05.2025 SB20250521110
#VU109592 - Command injection
CVE-2025-48201		 CWE-77 Medium
No
No
 13.0.1 21.05.2025 SB20250521110