TYPO3 Extension "TYPO3 Shop By Coding.ms"
2 CVEs affecting TYPO3 Extension "TYPO3 Shop By Coding.ms". Latest disclosed: 2026-10-20. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-113468 | | 2026-10-20 | The payment notification endpoint for PayPal accepts incoming data without verifying that it comes from the payment provider. Any site visitor can overwrite th… | |
CVE-2026-112071 | | 2026-10-20 | The order cancellation function accepts an order identifier from the request and acts on that order without checking that the caller owns it. Any site visitor… |