CVE-2021-31777

The dce (aka Dynamic Content Element) extension 2.2.0 through 2.6.x before 2.6.2, and 2.7.x before 2.7.1, for TYPO3 allows SQL Injection via a backend user…

published April 28, 2021

CVSS
—
EPSS
1%
Percentile
72.4
In the wild
Unconfirmed
What it is

The dce (aka Dynamic Content Element) extension 2.2.0 through 2.6.x before 2.6.2, and 2.7.x before 2.7.1, for TYPO3 allows SQL Injection via a backend user account.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01406 · 72.4th percentile
Published
2021-04-28T06:24Z
EPSS history
Timeline
  • 28 APR 06:24Z
    The dce (aka Dynamic Content Element) extension 2.2.0 through 2.6.x before 2.6.2, and 2.7.x before 2.7.1, for TYPO3 allows SQL Injection via a backend user…
    cvelistv5