CVE-2026-6553

· NIST NVD ↗

Changing backend users' passwords via the user settings module results in storing the cleartext password in the uc and user_settings fields of the be_users database table. This issue affects TYPO3 CMS version 14.2.0.

HIGH
CVSS severity
7.5
CVSS base score
2026-04-21
Published

CWE codes

CWE-312

Affected products

typo3:typo3

Sources