8.5
High
CVE-2023-39309 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ThemeFusion Fusion…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/a through 3.11.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Fusion Builder 3.11 | earliest → 3.11.1 | No fix stated |
Other CVEs of Fusion Builder
The 14 CVEs of Fusion Builder →
CVE-2026-56008
Contributor Privilege Escalation in Fusion Builder <= 3.15.4 versions
8.8
High
CVE-2026-54193
Contributor Arbitrary File Deletion in Fusion Builder <= 3.15.4 versions
7.7
High
CVE-2026-12256
Deserialization of Untrusted Data vulnerability in ThemeFusion Fusion Builder fusion-builder allows Object…
8.8
High
CVE-2026-54194
Contributor PHP Object Injection in Fusion Builder <= 3.15.4 versions
9.8
Critical