Skip to content
OpenAdvisories

Package · Packagist

mmc/ceselector

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.2
    CVE-2026-46725 Scanner template

    Remote Code Execution in extension "Content Element Selector" (ceselector)

    The extension passes an attacker-controlled cookie directly to PHP's unserialize() without safely processing the input. A remote, unauthenticated attacker can supply a crafted serialized payload to trigger PHP Object Injection, leading to Remote Code Executio…

    TYPO3 Extension "Content Element Selector" mmc/ceselector Packagist