What’s Vulnerable › Vulnerabilities

CVE-2022-35628

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 26.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-07-12 · updated 2026-06-17
• Weakness: CWE-89

Description

A SQL injection issue was discovered in the lux extension before 17.6.1, and 18.x through 24.x before 24.0.2, for TYPO3.

Affected products

• In2Code Living User Experience: before 17.6.1; from 18.0.0 before 24.0.2 — fixed in 17.6.1, 24.0.2

How to fix

Upgrade to a fixed version: In2Code Living User Experience 17.6.1, 24.0.2. Check the vendor advisory for mitigations.

References

• https://typo3.org/security/advisory/typo3-ext-sa-2022-014
• https://typo3.org/security/advisory/typo3-ext-sa-2022-014

Get alerted when CVE-2022-35628 or the next vulnerability affects your stack