Description
The Newsletter extension through 4.0.0 for TYPO3 allows SQL Injection.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | ecodev/newsletter | <= 4.0.0 | — | GHSA-hqm2-gwqf-r5g5 |
Medium · 4.0
CVE-2021-38302
EUVD-2021-2076GHSA-hqm2-gwqf-r5g5
SQL injection in TYPO3 extension
Published Aug 13, 2021 · Updated Aug 4, 2024 · Assigned by mitre