CVE-2026-112064: Extension "sgalinski Cookie Consent" 8.0.0 to before 8.1.12, 0 to before 7.4.6

Affected technology

Extension "sgalinski Cookie Consent" · 8.0.0 to before 8.1.12, 0 to before 7.4.6
TYPO3

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

A backend user with access to the history or statistics functions could use this to read arbitrary data from the database, including password hashes of backend and frontend users. Source advisory’s CVSS 4.0 assessment (base score 7.1/10) rates confidentiality impact as high; integrity and availability impact as none.