CVE-2021-38302

The Newsletter extension through 4.0.0 for TYPO3 allows SQL Injection...

CVE-2021-38302

CVE-2021-38302 affects the TYPO3 Newsletter extension (up to version 4.0.0). The vulnerability is a SQL Injection flaw arising in the extension, with multiple sources noting exploitation when processing bounced emails. Impact is high in affected environments, but official remediation details (spe...