GHSA-8cg3-jfjx-3pp2

ghsaUSosv

powermail extension for TYPO3 has Cross-site Scripting vulnerability

view advisory published 2022-05-17Licence: CC-BY-4.0

Cross-site scripting (XSS) vulnerability in the powermail extension before 1.6.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2012-5889US	medium4.3	0.93% (61st)	—	2012-11-17
Cross-site scripting (XSS) vulnerability in the powermail extension before 1.6.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

references

External citations — patches, advisories, analysis.

https://exchange.xforce.ibmcloud.com/vulnerabilities/74461WEB
https://github.com/in2code-de/powermailPACKAGE
https://nvd.nist.gov/vuln/detail/CVE-2012-5889ADVISORY
https://web.archive.org/web/20120701232300/http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-004WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan