Threats tagged 'ghsa-j8g2-q9pf-89w3'

CVE-2026-77129 is a high-severity vulnerability in the TYPO3 extension "Event management and registration." It allows a backend user with edit access to supply malicious Fluid ViewHelper syntax in an email subject field, which is passed directly into a Fluid template without restriction. This can lead to disclosure of sensitive data or execution of TypoScript content objects. Exploitation requires authenticated backend access with edit permissions to the event plugin or backend module.