Extension "Content Element Selector" vulnerabilities
1 known vulnerability in Extension "Content Element Selector" from TYPO3. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.2average CVSS score
Latest first
- 9.2 Critical severity
Extension "Content Element Selector": Deserialization of Untrusted Data
The extension passes an attacker-controlled cookie directly to PHP's unserialize() without safely processing the input. A remote, unauthenticated attacker can supply a crafted serialized payload to trigger PHP Object Injection, leading to Remote Code Execution