Extension "Frontend User Registration" vulnerabilities

1 known vulnerability in Extension "Frontend User Registration" from TYPO3. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Extension "Frontend User Registration": Authorization Bypass Through User-Controlled Key

  CVE-2026-120333Nov 3, 2026TYPO3

  The actions linked in the emails of the extension (e.g. to confirm a registration or the deletion of an account) do not reject requests with a missing or invalid hash. Instead, the frontend user given in the request is used. Unauthenticated attackers can there