Skip to content
OpenAdvisories

Package · Packagist

directmailteam/direct-mail

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low —
    CVE-2009-4159

    TYPO3 Direct Mail Extension Vulnerable to Cross-Site Scripting (XSS)

    Cross-site scripting (XSS) vulnerability in the newsletter configuration feature in the backend module in the Direct Mail (direct_mail) extension 2.6.4 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecif…

    directmailteam/direct-mail Packagist