TYPO3 wec_discussion extension SQL Injection Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland. wecdiscussion extension is a third-party forum extension plugin used in it. A SQL injection vulnerability exists in TYPO3 wecdiscussion extension versions prior to 2.1.1. The...

PT-2019-6673

Name of the Vulnerable Software and Affected Versions TYPO3 Core wec discussion extension versions prior to 2.1.1 Description The issue is related to SQL Injection due to improper sanitation of user-supplied input. This allows for potential exploitation by injecting malicious SQL code...