CVE-2025-10316 — Cross-Site Scripting in extension "Form to Database" (form_to_database)

CVE-2025-10316

Cross-Site Scripting in extension "Form to Database" (form_to_database) PUBLISHED

Description (CNA)

The extension "Form to Database" is susceptible to Cross-Site Scripting. This issue affects the following versions: before 2.2.5, from 3.0.0 before 3.2.2, from 4.0.0 before 4.2.3, from 5.0.0 before 5.0.2.

Affected (CNA)

Vendor / product	Versions
TYPO3 / Extension "Form to Database" (form_to_database)	affected 0 before 2.2.5; affected 3.0.0 before 3.2.2; affected 4.0.0 before 4.2.3; affected 5.0.0 before 5.0.2

CWE

CWE-79

References

https://typo3.org/security/advisory/typo3-ext-sa-2025-012

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.