TYPO3-EXT-SA-2026-038: Broken Access Control in extension "Frontend User Registration" (sf_register)

PKSA-d3w6-c3np-2vn6 CVE-2026-120333

Affected package: evoweb/sf-register

Affected version: >=14.0.0,<14.0.3|<13.2.5

Reported by:
FriendsOfPHP/security-advisories