VYPR

Club Directory

by TYPO3

CVEs (1)

  • CVE-2026-77141HigAug 25, 2026
    risk 0.57cvss epss

    The extension resolves the targeted club record from a user-supplied request argument in its frontend edit, update, and activate actions, but performs no ownership check in any of them. An unauthenticated visitor who knows the UID of a club record can send a direct request to…