VYPR

Modules

by TYPO3

CVEs (1)

  • CVE-2026-77127MedAug 25, 2026
    risk 0.39cvss epss

    The extension fails to restrict a backend AJAX endpoint for inline editing to fields the current user is permitted to see or edit. An authenticated, low-privileged backend user can supply arbitrary table, field and record parameters, and trigger an error response that discloses…