Extension "powermail" vulnerabilities
1 known vulnerability in Extension "powermail" from TYPO3. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.5average CVSS score
Latest first
- 9.5 Critical severity
Extension "powermail": Improper Neutralization of Special Elements Used in a Template Engine
The extension passes the raw value of a form field configured as "This field contains the name of the sender" directly into a Fluid View as template source, without any sanitization, and renders it. An anonymous, unauthenticated user can submit Fluid template