PatchTheCVE: dated news projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2021-36792: The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 has incorrect Access Control for confirming https://patchthecve.com/cve/CVE-2021-36792.htmlhttps://patchthecve.com/cve/CVE-2021-36792.htmlWed, 17 Jun 2026 03:59:26 +0000HIGH 7.2: The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 has incorrect Access Control for confirming various applications.CVE-2021-36791: The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows Information Disclosure of applicationhttps://patchthecve.com/cve/CVE-2021-36791.htmlhttps://patchthecve.com/cve/CVE-2021-36791.htmlWed, 17 Jun 2026 03:59:26 +0000MEDIUM 5.3: The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data.CVE-2021-36790: The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows XSS.https://patchthecve.com/cve/CVE-2021-36790.htmlhttps://patchthecve.com/cve/CVE-2021-36790.htmlWed, 17 Jun 2026 03:59:26 +0000MEDIUM 6.1: The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows XSS.CVE-2021-36789: The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows SQL Injection.https://patchthecve.com/cve/CVE-2021-36789.htmlhttps://patchthecve.com/cve/CVE-2021-36789.htmlWed, 17 Jun 2026 03:59:26 +0000CRITICAL 9.8: The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows SQL Injection.