CVE-2026-112066
Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin)
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The JSON import of the cookie consent configuration did not respect the backend user's permissions. Non-admin backend users with access to the module could import a configuration that adds arbitrary scripts to the frontend of the website.
| CWE | CWE-862 |
| Vendor | typo3 |
| Product | extension "sgalinski cookie consent" |
| Published | Oct 20, 2026 |
| Last Updated | Oct 20, 2026 |
Stay Ahead of the Next One
Get instant alerts for typo3 extension "sgalinski cookie consent"
Be the first to know when new unknown vulnerabilities affecting typo3 extension "sgalinski cookie consent" are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
TYPO3 / Extension "sgalinski Cookie Consent"
8.0.0 < 8.1.12 0 < 7.4.6
References
Credits
Stefan Galinski