← Database

CVE-2026-6553

HIGH CVSS: 7.5 Published: 2026-04-21 Modified: 2026-06-17

Description

Changing backend users' passwords via the user settings module results in storing the cleartext password in the uc and user_settings fields of the be_users database table. This issue affects TYPO3 CMS version 14.2.0.

Affected Platforms

Typo3 Typo3

Weakness Type

CWE-312

References