https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-22T02:40:04.142774+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-112066 CVE-2026-112066 — Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin) 2026-10-22T02:40:04.143637+00:00

Affected: TYPO3 Extension "sgalinski Cookie Consent"

The JSON import of the cookie consent configuration did not respect the backend user's permissions. Non-admin backend users with access to the module could import a configuration that adds arbitrary scripts to the frontend of the website.