TYPO3-EXT-SA-2026-036: Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)

PKSA-8c1z-qtpy-x6zn CVE-2026-112071

Affected package: codingms/shop

Affected version: >=6.0.0,<6.3.0|>=5.0.0,<5.21.1|<4.9.4

Reported by:
FriendsOfPHP/security-advisories