CVE-2013-4680: Open redirect vulnerability in Maag Form Captcha extension 2.0.0 and earlier for TYPO3 allows remote attack...

Security readout for executives and security teams

This is an open redirect issue in the Maag Form Captcha extension for TYPO3, version 2.0.0 and earlier. An attacker could send users through a trusted TYPO3 site to another website, supporting phishing. The sources do not provide CVSS, confirmed exploit activity, or detailed vectors. Exposure is likely limited to TYPO3 deployments using Maag Form Captcha 2.0.0 or earlier. Sites without that extension, or with unaffected versions, are not indicated as affected by the provided sources. Treat as a targeted phishing-enablement risk, not a confirmed system compromise issue. Prioritize if the organization runs legacy TYPO3 sites or customer-facing forms where brand trust matters. Mitigation focus: Identify whether TYPO3 uses Maag Form Captcha 2.0.0 or earlier.; Check TYPO3 extension advisory and vendor guidance for fixed versions or replacement advice.; Disable or remove the affected extension if it is not required..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.