It has been discovered that TYPO3 Flow is susceptible to Cross-Site Scripting.
It has been discovered that FLOW3 is vulnerable to Insecure Unserialize.