Threats tagged 'ghsa-w95p-wfvw-xgjm'

CVE-2026-77128 is a medium severity vulnerability in the TYPO3 extension "Event management and registration." It involves missing authorization checks that allow an unauthenticated remote user to bypass enable-field restrictions and view hidden or time-restricted events by passing a demand-override parameter. This issue occurs unless the plugin setting disableOverrideDemand is enabled.