CVE-2022-35628: SQL Injection in typo3 extension "LUX - TYPO3 Marketing Automation"

The provided vulnerability information describes a SQL injection issue in the TYPO3 lux extension but does not include concrete code examples, commit diffs, or patch details that would allow identification of specific vulnerable functions. While SQL injection typically occurs when user input is directly interpolated into SQL queries without proper sanitization (e.g., in repository methods using raw SQL with concatenated parameters), the lack of access to the actual pre-patch code or patch changes makes it impossible to identify exact function names and file paths with high confidence. The advisory mentions general failure to sanitize user input but provides no technical specifics about the affected code paths.