Skip to content
CVE PROGRAM SOURCE RECORD2.3 Low

CVE-2025-10316

Cross-Site Scripting in extension "Form to Database" (form_to_database)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TYPO3

Description

The extension "Form to Database" is susceptible to Cross-Site Scripting. This issue affects the following versions: before 2.2.5, from 3.0.0 before 3.2.2, from 4.0.0 before 4.2.3, from 5.0.0 before 5.0.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TYPO3 Extension "Form to Database" (form_to_database)

Default version status: unaffected

  • 0 to < 2.2.5affected
  • 3.0.0 to < 3.2.2affected
  • 4.0.0 to < 4.2.3affected
  • 5.0.0 to < 5.0.2affected

References