Typo3 Commerce Extension vulnerabilities
2 vulnerabilities
Known vulnerabilities in Typo3 Commerce Extension, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2009-4963typo3 · commerce_extensiontypo3 commerce_extensionCross-site scripting (XSS) vulnerability in the Commerce extension before 0.9.9 for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.CVSS3.5LowEPSS0.83%RoutineCVE-2008-5609typo3 · commerce_extensiontypo3 commerce_extensionSQL injection vulnerability in the Commerce extension 0.9.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.CVSS7.5HighEPSS1.05%