CVE-2026-113442: Extension "TYPO3 Fluid-Form by coding.ms" 6.0.0 to before 6.0.6, 0 to before 5.0.10

Affected technology

Extension "TYPO3 Fluid-Form by coding.ms" · 6.0.0 to before 6.0.6, 0 to before 5.0.10
TYPO3

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · No privileges required · Passive user interaction

What an attacker can do

An unauthenticated attacker could use this to inject HTML into an email that is shown to the recipient. Source advisory’s CVSS 4.0 assessment (base score 5.3/10) rates confidentiality and availability impact as none; integrity impact as low.