Cross-site scripting (XSS) vulnerability in the Mailform (mailform) extension before 0.9.24 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-79,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| sebastian_winterhalder | mailform | 0.9.10 |
| sebastian_winterhalder | mailform | 0.9.12 |
| sebastian_winterhalder | mailform | 0.9.14 |
| sebastian_winterhalder | mailform | 0.9.13 |
| sebastian_winterhalder | mailform | * |