codingms/modules vulnerabilities

Latest codingms/modules CVEs

Newest publication first

1. CVE-2026-77127 Information Disclosure in extension "Modules" (modules)

   Published 2026-08-25

   Medium·CVSS 6.0

   The extension fails to restrict a backend AJAX endpoint for inline editing to fields the current user is permitted to see or edit. An authenticated, low-privileged backend user can supply arbitrary table, field and record parameters, and trigger an error response that discloses t...

2. CVE-2025-12998 Broken Authentication in extension “Modules” (modules)

   Published 2025-11-12

   High·CVSS 8.2 EPSS 0.36%

   Improper Authentication vulnerability in TYPO3 Extension "Modules" codingms/modules.This issue affects Extension "Modules": before 4.3.11, from 5.0.0 before 5.7.4, from 6.0.0 before 6.4.2, from 7.0.0 before 7.5.5.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.