CVE-2026-112066: Extension "sgalinski Cookie Consent" 8.0.0 to before 8.1.12, 0 to before 7.4.6

Affected technology

Extension "sgalinski Cookie Consent" · 8.0.0 to before 8.1.12, 0 to before 7.4.6
TYPO3

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

Non-admin backend users with access to the module could import a configuration that adds arbitrary scripts to the frontend of the website. Source advisory’s CVSS 4.0 assessment (base score 7.1/10) rates confidentiality and availability impact as none; integrity impact as high.