TYPO3 Extension "Mail"
3 CVEs affecting TYPO3 Extension "Mail". Latest disclosed: 2026-11-03. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-120332 | | 2026-11-03 | The HTML content of mails and tracked URLs are rendered unescaped in the backend module. Backend users with access to the mail module can inject arbitrary HTML… | |
CVE-2026-120331 | | 2026-11-03 | Content of external URL mails, their stylesheets and images to embed is fetched by the server without validating the target host. Backend users with access to… | |
CVE-2026-120329 | | 2026-11-03 | Saving the configuration of the mail backend module writes submitted settings to the page TSconfig without restricting them to the configuration options of the… |