CVE-2026-120330

A flaw was found in the TYPO3 Mail extension. This vulnerability allows an authenticated backend user to access and disclose sensitive email and recipient information beyond their authorized permissions. The issue occurs because administrative actions and background web request endpoints fail to...

CVE-2022-31049 Cross-Site Scripting in Frontend Login Mailer

TYPO3 is an open source web content management system. Prior to versions 9.5.34 ELTS, 10.4.29, and 11.5.11, user submitted content was used without being properly encoded in HTML emails sent to users. The actually affected components were mail clients used to view those messages. TYPO3 versions...