CVE-2026-112071: medium-severity vulnerability in TYPO3 Extension "TYPO3 Shop by coding.ms"
Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 6.9epss 0.4%
from disclosure to weaponsame day
Published on NVDOct 20
1st PoCOct 20
The order cancellation function accepts an order identifier from the request and acts on that order without checking that the caller owns it. Any site visitor can set orders that are still awaiting payment to "canceled". This requires a page that contains the shop's order plugin. Orders that are already paid are not affected.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Affected products
TYPO3 · Extension "TYPO3 Shop by coding.ms"public PoCs found — 1
githubgithub.com/yuwkaaa/CVE-2026-112071★ 0⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — TYPO3 Extension "TYPO3 Shop by coding.ms"
In the same product, most dangerous first.