Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

TYPO3 allows spam to be embedded in website content

CVE-2010-3667 · published 7 years ago
Summary

TYPO3, a popular website content management system, has a security weakness that can allow spammers to insert unwanted content onto your website. This means that malicious messages or links could be posted on your site without your permission. To protect your site, update to the latest version of TYPO3.

What to do
  • Update typo3 cms-frontend to version 4.1.14.
  • Update typo3 cms-frontend to version 4.2.13.
  • Update typo3 cms-frontend to version 4.3.4.
  • Update typo3 cms-frontend to version 4.4.1.
Affected software
Ecosystem VendorProductAffected versions
composer typo3 cms-frontend < 4.1.14
>= 4.2.0, < 4.2.13
>= 4.3.0, < 4.3.4
>= 4.4.0, < 4.4.1
Fix: upgrade to 4.1.14
– typo3 typo3 < 4.1.14
>= 4.2.0, < 4.2.13
>= 4.3.0, < 4.3.4
>= 4.4.0, < 4.4.1
cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*
Original advisory text
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Spam Abuse in the native form content element.
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Spam Abuse in the native form content element.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.3 Medium
Exploitation
1% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published4 Nov 2019
Updated4 Nov 2026
First seen6 Mar 2026
Sources
GHSA-48ww-8h7g-4hwq · GHSA
CVE-2010-3667 · NVD
Track software like this
Free during beta