| Package | Affected versions | Patched versions |
|---|---|---|
| t3/dce | ≥ 2.2.0, < 2.6.2 | 2.6.2 |
| dynamic content elements | ≥ 2.2.0, < 2.6.2≥ 2.7.0, < 2.7.1 | 2.6.22.7.1 |
The dce (aka Dynamic Content Element) extension 2.2.0 through 2.6.x before 2.6.2, and 2.7.x before 2.7.1, for TYPO3 allows SQL Injection via a backend user account.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free