CVE-2015-8760: TYPO3

Medium severity, CVSS 6.1. EPSS: 1.4% chance of exploitation in the next 30 days.

The Flvplayer component in TYPO3 6.2.x before 6.2.16 allows remote attackers to embed Flash videos from external domains via unspecified vectors, aka "Cross-Site Flashing."

Affected products

• TYPO3 TYPO3: version 6.2 only; version 6.2.0 only; version 6.2.1 only; version 6.2.2 only; version 6.2.3 only; version 6.2.4 only; …

Published 2016-01-08. Last modified 2026-06-17.