CVE-2022-35628: IN2CODE Living User Experience

Critical severity, CVSS 9.8. EPSS: 26.8% chance of exploitation in the next 30 days.

A SQL injection issue was discovered in the lux extension before 17.6.1, and 18.x through 24.x before 24.0.2, for TYPO3.

Affected products

• IN2CODE Living User Experience: before 17.6.1 (fixed in 17.6.1); from 18.0.0, before 24.0.2 (fixed in 24.0.2)

Published 2022-07-12. Last modified 2026-06-17.