p PatchFirst

PatchFirst · Latest vulnerabilities

friendsoftypo3/tt-address vulnerabilities

Vulnerabilities published for friendsoftypo3/tt-address in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2026-8827

    High · CVSS 8.2EPSS 0.33%Fix available

    SQL Injection in extension "Address List" (tt_address)

    The AddressRepository::getSqlQuery() method constructs a database query without properly sanitizing user input, leading to SQL Injection. The method is not invoked anywhere within the extension itself and therefore poses no direct risk in a default installation. However, custom extensions that call this method with untrusted input would expose the site to SQL injection.

    friendsoftypo3/tt-address friendsoftypo3/tt-address friendsoftypo3/tt-addressPHP
    • Update to 10.0.1
    • Update to 8.1.2
    • Update to 9.1.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →