Typo3 Commerce Extension vulnerabilities

• typo3 commerce extension Commerce extension for TYPO3 vulnerable to Cross-site Scripting CVE-2009-4963 Fix available 3.5 LowJuly 27, 2010
• typo3 commerce extension SQL injection vulnerability in the Commerce extension 0.9.6 and earlier for TYPO3 allows remote... CVE-2008-5609 7.5 HighDecember 17, 2008