← Back

Dynamic Content Elements

dynamic_content_elements

Vendor: Dynamic Content Elements Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-31777
1Dynamic Content Elements Project
1Dynamic Content Elements
Jun 17, 2026
Apr 28, 2021
N/A· v4
4.9 MEDIUM· v3
4.0 MEDIUM· v2
The dce (aka Dynamic Content Element) extension 2.2.0 through 2.6.x before 2.6.2, and 2.7.x before 2.7.1, for TYPO3 allows SQL Injection via a backend user account.
CVE-2014-8328
1Dynamic Content Elements Project
1Dynamic Content Elements
Nov 21, 2024
Feb 3, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
The default configuration in the Dynamic Content Elements (dce) extension before 0.11.5 for TYPO3 allows remote attackers to obtain sensitive installation environment information by reading the update check request.