CVE-2012-5889

Alex Kellner Powermail < 1.6.4 - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in the powermail extension before 1.6.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (2)

[Patch, Vendor Advisory] http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-004/

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/74461

Scores

EPSS 0.0026

EPSS Percentile 49.4%

Details

CWE

CWE-79

Status published

Products (50)

alex_kellner/powermail < 1.6.4

alex_kellner/powermail

... and 40 more

Published Nov 17, 2012

Tracked Since Feb 18, 2026