GHSA-7X6F-JVMG-6FGP TYPO3 Direct Mail Extension Vulnerable to Cross-Site Scripting (XSS)

Cross-site scripting XSS vulnerability in the newsletter configuration feature in the backend module in the Direct Mail directmail extension 2.6.4 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

PT-2020-13214

Name of the Vulnerable Software and Affected Versions TYPO3 direct mail extension versions through 5.2.3 Description The issue allows Information Disclosure via a newsletter subscriber data Special Query. Recommendations For versions through 5.2.3, update to a version later than 5.2.3 to resolve...

PT-2020-13213

Name of the Vulnerable Software and Affected Versions TYPO3 direct mail extension versions through 5.2.3 Description The issue concerns an Open Redirect via the jumpUrl. Recommendations For versions through 5.2.3, update to a version that contains a fix for this issue...

TYPO3 Direct Mail Component Input Validation Error Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland. direct Mail is an email marketing extension plugin used in it. A security vulnerability exists in the Direct Mail component of TYPO3 5.2.3 and earlier versions, which stems from...

TYPO3 Direct Mail Information Disclosure Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland. direct Mail is an email marketing extension plugin used in it. An information disclosure vulnerability exists in TYPO3 Direct Mail 5.2.2 and prior versions. The vulnerability ste...

PT-2017-5749

Name of the Vulnerable Software and Affected Versions: TYPO3 Direct Mail extension versions prior to 3.1.2 Description: The issue allows remote attackers to obtain sensitive information due to improper checking of authentication codes. Recommendations: For versions prior to 3.1.2, update to versi...