HIGH8.8CVE-2023-50461Configuration Injection in extension "Direct Mail" (direct_mail) >= 8.0.0, < 9.5.2
HIGH7.5CVE-2013-7400The Direct Mail (direct_mail) TYPO3 extension improperly discloses sensitive information from 0, < 3.1.2
from 0, < 5.2.4
MEDIUM5.3Denial of service in direct_mail
from 0, < 5.2.4
MEDIUM4.3direct_mail for Typo3 sensitive data exposure
from 0, < 5.2.3
MEDIUM4.3Missing Authorization in TYPO3 extension
from 0, < 5.2.4
MEDIUM4.3Missing Authorization in TYPO3 extension
from 0, < 5.2.4
—TYPO3 Direct Mail Extension Vulnerable to Cross-Site Scripting (XSS)
from 0, < 2.6.5