CVE-2022-35628

The CVE-2022-35628 issue affects the TYPO3 lux extension. A SQL injection vulnerability exists in lux versions prior to 17.6.1 and 18.x–24.x before 24.0.2, allowing injection via vulnerable code paths in TYPO3. The CVSS data indicates a high/critical impact (CVSS v3.1: 9.8) with network access an...