description: The TYPO3 Core wec_discussion extension before 2.1.1 is vulnerable to SQL Injection due to improper sanitation of user-supplied input.
problem types: SQL Injection
affected:
{
product: wec_discussion
vendor: TYPO3 Core
versions:
status: affected, version: before 2.1.1
}