Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-v3mr-gp7j-pw5w

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-v3mr-gp7j-pw5w

Possible SQL injection in tablelookupwizard Contao Extension ### Impact The currently selected widget values were not correctly sanitized before passing it to the database, leading to an SQL injection possibility. ### Patches The issue has been patched in `tablelookupwizard` version 3.3.5 and version 4.0.0. ### For more information If you have any questions or comments about this advisory: * Open an issue in https://github.com/terminal42/contao-tablelookupwizard * Email us at [info@terminal42.ch](mailto:info@terminal42.ch)

gitlab/packagist/terminal42/contao-tablelookupwizard/GHSA-v3mr-gp7j-pw5w

Possible SQL injection in tablelookupwizard Contao Extension The currently selected widget values were not correctly sanitized before passing it to the database, leading to an SQL injection possibility.

gitlab/packagist/terminal42/contao-tablelookupwizard/GMS-2022-17

Duplicate This advisory duplicates another.