Description
The vhs (aka VHS: Fluid ViewHelpers) extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | fluidtypo3/vhs | < 5.1.1 | 5.1.1 | GHSA-wq4r-8342-jmc9 |
Medium · 5.4
CVE-2021-28381
EUVD-2021-0720GHSA-wq4r-8342-jmc9
SQL injection in vhs (aka VHS: Fluid ViewHelpers)
Published Mar 16, 2021 · Updated Aug 3, 2024 · Assigned by mitre