CVE-2009-4706

TYPO3 mailform <0.9.24 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the Mailform (mailform) extension before 0.9.24 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (1)

[Patch, Vendor Advisory] http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-010/

Scores

EPSS 0.0026

EPSS Percentile 49.4%

Classification

CWE

CWE-79

Status published

Affected Products (6)

sebastian_winterhalder/mailform < 0.9.23

sebastian_winterhalder/mailform

n/a/n/a

Timeline

Published Mar 15, 2010

Tracked Since Feb 18, 2026