Skip to content
OpenAdvisories

Package · Packagist

evoweb/sf-register

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.9
    CVE-2026-46721

    Broken Access Control in extension "Frontend User Registration" (sf_register)

    The create and edit flows do not restrict which user properties may be submitted and do not enforce access control on the frontend user group assignment. As a result, an attacker can assign an arbitrary frontend user group to a newly registered or edited acco…

    TYPO3 Extension "Frontend User Registration" evoweb/sf-register Packagist