TYPO3-EXT-SA-2026-023: Server-Side Template Injection in extension "Event management and registration" (sf_event_mgt)

PKSA-xn4n-zch1-3zsy CVE-2026-77129

Affected package: derhansen/sf_event_mgt

Affected version: >=9.0.0,<9.0.3|>=8.0.0,<8.6.2|>=7.0.0,<7.9.3|>=6.0.0,<6.7.2|<5.9.3

Reported by:
FriendsOfPHP/security-advisories