{"id":"CVE-2026-112066","published":"2026-10-20T10:17:03.757","lastModified":"2026-10-20T19:28:52.970","description":"The JSON import of the cookie consent configuration did not respect the backend user's permissions. Non-admin backend users with access to the module could import a configuration that adds arbitrary scripts to the frontend of the website.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-862"],"vendors":[],"products":[],"references":[{"url":"https://typo3.org/security/advisory/typo3-ext-sa-2026-029","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}