CVE-2025-10316
1 advisory.
Packagist/lavitto/typo3-form-to-database CVE-2025-10316: low 2.3, EPSS 0.33%
TYPO3 "Form to Database" extension susceptible to Cross-site Scripting
Action: Upgrade lavitto/typo3-form-to-database to 2.2.5 or later.
composer require lavitto/typo3-form-to-database:2.2.5composer require lavitto/typo3-form-to-database:3.2.2composer require lavitto/typo3-form-to-database:4.2.3composer require lavitto/typo3-form-to-database:5.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.5 | - |
| 3.0.0 | 3.2.2 | - |
| 4.0.0 | 4.2.3 | - |
| 5.0.0 | 5.0.2 | - |
Fixed versions
| 2.2.5 | 3.2.2 | 4.2.3 | 5.0.2 |
Sources
- osv: GHSA-54pg-2x9h-cmx8
- nvd: CVE-2025-10316
- https://gitlab.com/lavitto/typo3-form-to-database
- https://gitlab.com/lavitto/typo3-form-to-database/-/commit/a3ab9bf9c04061d1841fff96a08c4dbf48aaaf37
- https://gitlab.com/lavitto/typo3-form-to-database/-/issues/135
- https://typo3.org/security/advisory/typo3-ext-sa-2025-012
CVE-2025-10316 · published · modified · JSON