CVE-2026-42381 Unauthenticated SQL Injection in Funnel Builder by FunnelKit <= 3.15.0.1 versions

Description

Unauthenticated SQL Injection in Funnel Builder by FunnelKit <= 3.15.0.1 versions.

Affected products and versions

Product	Affected versions	Fixed in
Funnel Builder by FunnelKit 3.15	earliest → 3.15.0.1	No fix stated

Other CVEs of Funnel Builder by FunnelKit

The 8 CVEs of Funnel Builder by FunnelKit →

CVE-2026-57816 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FunnelKit Funnel… 7.1 High CVE-2026-56052 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Funnel… 7.6 High CVE-2026-48966 Unauthenticated Cross Site Scripting (XSS) in Funnel Builder by FunnelKit <= 3.15.0.2 versions 7.1 High CVE-2025-66067 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman Funnel… 6.5 Medium