In2code Powermail
4 CVEs affecting In2code Powermail. Latest disclosed: 2024-09-17. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-45233 | Critical | 9.8 | 2024-08-29 | An issue was discovered in powermail extension through 12.3.5 for TYPO3. Several actions in the OutputController can directly be called, due to missing or insu… |
CVE-2024-47047 | High | 7.5 | 2024-09-17 | An issue was discovered in the powermail extension through 12.4.0 for TYPO3. It fails to validate the mail parameter of the createAction, resulting in Insecure… |
CVE-2024-45232 | Medium | 5.3 | 2024-08-29 | An issue was discovered in powermail extension through 12.3.5 for TYPO3. It fails to validate the mail parameter of the confirmationAction, resulting in Insecu… |
CVE-2008-2182 | | 2008-05-13 | Cross-site scripting (XSS) vulnerability in the powermail extension before 1.1.10 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via… |