Package impact
Packagist / tpwd/ke_search
| CVE | Severity | CVSS | Risk | Flags | OS | Vendor | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-46722 | unknown | — | — | 17d ago | TYPO3-EXT-SA-2026-011: XML External Entity Injection in extension "Faceted Search" (ke_search) | |||
| CVE-2026-46723 | unknown | — | — | 17d ago | The additional_tables configuration of the page and tt_content indexers accepts arbitrary table and field names. A backend user with permission to edit indexer configurations can copy sensitive data … | |||
| CVE-2026-46724 | unknown | — | — | 17d ago | TYPO3-EXT-SA-2026-011: Path Traversal in extension "Faceted Search" (ke_search) | |||
| CVE-2023-35783 | unknown | — | — | 3y ago | ke_search (aka Faceted Search) vulnerable to Cross-Site Scripting | |||
| CVE-2020-15517 | unknown | — | — | 4y ago | ke_search for Typo3 XSS Vulnerability |