{"action":"Upgrade directmailteam/direct-mail to 2.6.5 or later.","affected":[{"fixed":"2.6.5","introduced":"0"}],"component":"directmailteam/direct-mail","cve_ids":["CVE-2009-4159"],"ecosystem":"Packagist","epss":0.00842,"exploited":false,"fixed_versions":["2.6.5"],"ghsa_id":"GHSA-7x6f-jvmg-6fgp","id":"tcs_01M5KEYGVPV0GEDCH2RW2ZY2E7","modified_at":"2025-04-10T12:42:12.705589Z","published_at":"2022-05-02T03:52:19Z","references":["https://osv.dev/vulnerability/GHSA-7x6f-jvmg-6fgp","https://nvd.nist.gov/vuln/detail/CVE-2009-4159","https://github.com/kartolo/direct_mail","https://web.archive.org/web/20110108051351/http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-018","https://web.archive.org/web/20200228220911/http://www.securityfocus.com/bid/37166","http://typo3.org/extensions/repository/view/direct_mail/2.6.5"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-7x6f-jvmg-6fgp","url":"https://osv.dev/vulnerability/GHSA-7x6f-jvmg-6fgp"}],"summary":"TYPO3 Direct Mail Extension Vulnerable to Cross-Site Scripting (XSS)"}