Multiple security issues found in TYPO3 core, one of them beeing critical
 

It has been discovered that TYPO3 Core is vulnerable to Remote File Disclosure, Cross-Site Scripting (XSS), Privilege Escalation and Denial of Service.

More...