PatchTheCVE: joachim ruhshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2013-5305: Cross-site scripting (XSS) vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allowhttps://patchthecve.com/cve/CVE-2013-5305.htmlhttps://patchthecve.com/cve/CVE-2013-5305.htmlTue, 16 Jun 2026 23:58:35 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2013-5304: SQL injection vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote attahttps://patchthecve.com/cve/CVE-2013-5304.htmlhttps://patchthecve.com/cve/CVE-2013-5304.htmlTue, 16 Jun 2026 23:58:35 +0000HIGH 7.5: SQL injection vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.CVE-2013-5303: Unspecified vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 has unknown impact ahttps://patchthecve.com/cve/CVE-2013-5303.htmlhttps://patchthecve.com/cve/CVE-2013-5303.htmlTue, 16 Jun 2026 23:58:35 +0000HIGH 10.0: Unspecified vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize."