TYPO3-EXT-SA-2026-036: Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)

PKSA-qcjp-qhjx-bgmg CVE-2026-113468

Affected package: codingms/shop

Affected version: >=6.0.0,<6.3.0|>=5.0.0,<5.21.1|<4.9.4

Reported by:
FriendsOfPHP/security-advisories