~/products/typo3/extension_content_element_selector

pipeline liveDigest Docs

Typo3 Extension Content Element Selector vulnerabilities

1 known vulnerability affecting typo3/extension_content_element_selector.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

SortPage 1 of 1

CVE-2026-46725P2CRITICALCVSS 9.2PoC≥ 6.0.0, < 6.0.1≥ 5.0.0, < 5.0.1+2 more2026-05-19

CVE-2026-46725 [CRITICAL] CWE-502 CVE-2026-46725: The extension passes an attacker-controlled cookie directly to PHP's unserialize() without safely pr The extension passes an attacker-controlled cookie directly to PHP's unserialize() without safely processing the input. A remote, unauthenticated attacker can supply a crafted serialized payload to trigger PHP Object Injection, leading to Remote Code Execution on the TYPO3 server. Exploitation requires the content element to be configured with "Pe

Typo3 Extension Content Element Selector vulnerabilities | cvebase