~ / search / GHSA-wq4r-8342-jmc9

GHSA-wq4r-8342-jmc9

SQL injection in vhs (aka VHS: Fluid ViewHelpers)

Source: GitHub Advisory Database (reviewed) Critical CVE-2021-28381

Packages

EcosystemPackageAffectedFixed in
Packagist fluidtypo3/vhs < 5.1.1 5.1.1

Details

As written in the advisory (Markdown source, shown as plain text).

The vhs (aka VHS: Fluid ViewHelpers) extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper.

References

External links from the advisory. They lead to third-party sites.