Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
The vhs (aka VHS: Fluid ViewHelpers) extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper.
Advisories for Composer/Fluidtypo3/Vhs package
2021