For all of you who are not that deeply involved in the making of TYPO3 v5, I have collected the most important bits of last month's activities.
It has been discovered that the extension powermail is susceptible to Cross Site Scripting (XSS) attacks.
It has been discovered that the extension MailformPlus (th_mailformplus) is susceptible to Cross Site Scripting (XSS) attacks and allows Remote Code Execution.