CVE-2025-10316
Expert Analysis
Professional remediation guidance
Get tailored security recommendations from our analyst team for CVE-2025-10316. We'll provide specific mitigation strategies based on your environment and risk profile.
Description
The extension "Form to Database" is susceptible to Cross-Site Scripting. This issue affects the following versions: before 2.2.5, from 3.0.0 before 3.2.2, from 4.0.0 before 4.2.3, from 5.0.0 before 5.0.2.
Available Exploits
Related News
EU Vulnerability Database
Monitored by ENISA for EU cybersecurity
ENISA Analysis
Malicious code in bioql (PyPI)
Affected Products (ENISA)
ENISA Scoring
CVSS Score (4.0)
EPSS Score
ENISA References
Data provided by ENISA EU Vulnerability Database. Last updated: October 3, 2025
GitHub Security Advisories
Community-driven vulnerability intelligence from GitHub
TYPO3 "Form to Database" extension susceptible to Cross-site Scripting
GHSA-54pg-2x9h-cmx8Advisory Details
Affected Packages
CVSS Scoring
CVSS Score
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
References
Advisory provided by GitHub Security Advisory Database. Published: September 16, 2025, Modified: September 16, 2025