TYPO3 Extension "Powermail"
2 CVEs affecting TYPO3 Extension "Powermail". Latest disclosed: 2026-08-25. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-77136 | | 2026-08-25 | The extension passes the raw value of a form field configured as "This field contains the name of the sender" directly into a Fluid View as template source, wi… | |
CVE-2025-7899 | | 2025-07-22 | The powermail extension for TYPO3 allows Insecure Direct Object Reference resulting in download of arbitrary files from the webserver. This issue affects power… |