> CVE-2025-10316

« BACK_TO_HOME
PUBLISHED
2025-09-16 09:15
MODIFIED
2025-09-16 12:49
EPSS (Prob. Exploit)
0.33%
Top 74.4%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-11-04

> DESCRIPTION

The extension "Form to Database" is susceptible to Cross-Site Scripting. This issue affects the following versions: before 2.2.5, from 3.0.0 before 3.2.2, from 4.0.0 before 4.2.3, from 5.0.0 before 5.0.2.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-54pg-2x9h-cmx8 LOW

TYPO3 "Form to Database" extension susceptible to Cross-site Scripting

AFFECTED PACKAGES:
COMPOSER / lavitto/typo3-form-to-database
>= 5.0.0, < 5.0.2
Fixed in: 5.0.2
COMPOSER / lavitto/typo3-form-to-database
>= 4.0.0, < 4.2.3
Fixed in: 4.2.3
COMPOSER / lavitto/typo3-form-to-database
>= 3.0.0, < 3.2.2
Fixed in: 3.2.2
COMPOSER / lavitto/typo3-form-to-database
< 2.2.5
Fixed in: 2.2.5

> HISTORIQUE DES MODIFICATIONS

Première apparition
16/09/2025 09:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:08
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME