Description
The TYPO3 Core wec_discussion extension before 2.1.1 is vulnerable to SQL Injection due to improper sanitation of user-supplied input.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TYPO3 Core | wec_discussion | before 2.1.1 | — |
Unscored
CVE-2011-3584
EUVD-2011-3546GHSA-7g7c-h6m2-fvm7
The TYPO3 Core wec_discussion extension before 2.1.1 is vulnerable to SQL Injection due to improper sanitation of user-supplied input.
Published Nov 25, 2019 · Updated Aug 6, 2024 · Assigned by redhat