codingms/modules vulnerabilities

CVEs whose affected-version data names the codingms/modules package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-77127Medium· 6.0

3w ago

Information Disclosure in extension "Modules" (modules)

The extension fails to restrict a backend AJAX endpoint for inline editing to fields the current user is permitted to see or edit. An authenticated, low-privileged backend user can supply arbitrary table, field and record parameters, and…

▾ SunlitTYPO3 · codingms/modulesEPSS 0.26%via CVEORG