CVE-2011-3980: Jerome Schneider Ameos Dragndropupload

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Drag Drop Mass Upload (ameos_dragndropupload) extension 2.0.2 and earlier for TYPO3 allows remote attackers to upload arbitrary files via unknown vectors.

Affected products

• Jerome Schneider Ameos Dragndropupload: up to and including 2.0.2; version 2.0.0 only; version 2.0.1 only

Published 2011-10-04. Last modified 2026-06-16.