← Back

Commerce Extension

commerce_extension

Vendor: Typo3 • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-4963
1Typo3
1Commerce Extension
Apr 29, 2026
Jul 28, 2010
N/A· v4
N/A· v3
3.5 LOW· v2
Cross-site scripting (XSS) vulnerability in the Commerce extension before 0.9.9 for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVE-2008-5609
1Typo3
1Commerce Extension
Apr 23, 2026
Dec 17, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the Commerce extension 0.9.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.