Known vulnerabilities in DRC News Comment
Vendor:
TYPO3
Software:
DRC News Comment
Software CPE:
cpe:2.3:a:typo3:drc_news_comment:*:*:*:*:*:typo3:*:*
Website:
https://typo3.org/
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU9728 - Improper input validation |
CWE-20 | High | - | 25.12.2017 |
SB2017122505 |
||
| #VU9727 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CWE-79 | Low | - | 25.12.2017 |
SB2017122505 |