Known vulnerabilities in SLUB: Event Registration

Vendor: TYPO3
Software: SLUB: Event Registration
Software CPE: cpe:2.3:a:typo3:slub_events:*:*:*:*:*:typo3:*:*
Website: https://typo3.org/
Total vulnerabilities: 3
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SLUB: Event Registration SLUB: Event Registration is affected by 3 known vulnerabilities: 1 high, 2 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU21799 - Unrestricted Upload of File with Dangerous Type
CVE-2019-16700		 CWE-434 High
No
No
 3.0.3 15.10.2019 SB2019101513
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Available
No
 3.0.3 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU8435 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-2531		 CWE-79 Low
No
No
 3.0.3 08.09.2015 SB2019101513