Extension "sgalinski Cookie Consent" vulnerabilities

2 known vulnerabilities in Extension "sgalinski Cookie Consent" from TYPO3. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Extension "sgalinski Cookie Consent": Missing Authorization

  CVE-2026-112066Oct 20, 2026TYPO3

  The JSON import of the cookie consent configuration did not respect the backend user's permissions. Non-admin backend users with access to the module could import a configuration that adds arbitrary scripts to the frontend of the website.

• 7.1 High severity

  Extension "sgalinski Cookie Consent": Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-112064Oct 20, 2026TYPO3

  The backend module for reviewing the consent history accepted sorting, grouping and index options from the request and used them in a database query without validation. Only the filter conditions of that query were bound as parameters. A backend user with acce