Vulnerability CVE-2021-31777
Published: 2021-04-28

Description:
The dce (aka Dynamic Content Element) extension 2.2.0 through 2.6.x before 2.6.2, and 2.7.x before 2.7.1, for TYPO3 allows SQL Injection via a backend user account.

 References:
https://typo3.org/security/advisory/typo3-ext-sa-2021-005
https://excellium-services.com/cert-xlm-advisory/
Copyright 2024, cxsecurity.com

 

Back to Top