[CRITICAL] TYPO3-EXT-SA-2026-013: Remote Code Execution in extension "Content Element Selector" (ceselector)

PKSA-kfm7-j6tb-2qn9 CVE-2026-46725 GHSA-8x3j-439w-537c

Affected package: mmc/ceselector

Affected version: >=6.0.0,<6.0.1|>=5.0.0,<5.0.1|>=4.0.0,<4.0.2|<3.0.3

Reported by:
GitHub, FriendsOfPHP/security-advisories