TYPO3-EXT-SA-2026-037: Cross-Site Scripting in extension "Mail" (mail)

PKSA-t76y-hqn1-zzxw CVE-2026-120332

Affected package: mediaessenz/mail

Affected version: >=4.0.0,<4.2.0|<3.12.5

Reported by:
FriendsOfPHP/security-advisories