CVE-2009-4159

CVE-2009-4159 describes a cross-site scripting (XSS) vulnerability in the newsletter configuration feature of the TYPO3 Direct Mail extension (direct_mail), affecting version 2.6.4 and earlier. The flaw resides in the backend module and allows remote authenticated users to inject arbitrary web sc...