Skip to content
RequestGuard Vulnerabilities
Pricing
Vulnerability intelligence Composer

typo3/cms-indexed-search

TYPO3 CMS Indexed Search - Provides indexing functionality for TYPO3 pages and records as well as files including PDF, Word, HTML and plain text.

Composer latest 13.4.35 GPL-2.0-or-later

Evidence path

Version, exploitation, severity

RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.

1

Latest version

13.4.35

No matching published advisory returned

2

Known exploitation

No KEV match

Checked by exact CVE identifier

3

Highest advisory severity

Moderate

2 active advisories

Check an exact version

The registry confirms the version, then OSV checks advisories for that exact value.

Published records

Advisories

2
GHSA-cg75-qfg2-w9hj moderate

TYPO3 CMS has Cross-Site Scripting in Indexed Search

Affected range

ECOSYSTEM: introduced 13.0.0; fixed 13.4.31ECOSYSTEM: introduced 14.0.0; fixed 14.3.3>=14.0.0,<14.3.3|>=13.0.0,<13.4.31

Fixed versions: 13.4.31, 14.3.3

CVE-2026-47348 Source ↗Source ↗
GHSA-7r5q-4qgx-v545 moderate

TYPO3 Indexed Search Module vulnerable to Cross-Site Request Forgery

Affected range

ECOSYSTEM: introduced 10.0.0; fixed 10.4.48ECOSYSTEM: introduced 11.0.0; fixed 11.5.42ECOSYSTEM: introduced 12.0.0; fixed 12.4.25ECOSYSTEM: introduced 13.0.0; fixed 13.4.3>=13.0.0,<=13.4.2|>=12.0.0,<=12.4.24|>=11.0.0,<=11.5.41|>=10.0.0,<=10.4.47

Fixed versions: 10.4.48, 11.5.42, 12.4.25, 13.4.3

CVE-2024-55923 Source ↗Source ↗