7.6
High
CVE-2026-56052 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Funnel…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Funnel Builder by FunnelKit allows Blind SQL Injection. This issue affects Funnel Builder by FunnelKit: from n/a through 3.15.0.5.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Funnel Builder by FunnelKit 3.15 | earliest → 3.15.0.5 | No fix stated |
Other CVEs of Funnel Builder by FunnelKit
The 8 CVEs of Funnel Builder by FunnelKit →
CVE-2026-57816
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FunnelKit Funnel…
7.1
High
CVE-2026-48966
Unauthenticated Cross Site Scripting (XSS) in Funnel Builder by FunnelKit <= 3.15.0.2 versions
7.1
High
CVE-2026-42381
Unauthenticated SQL Injection in Funnel Builder by FunnelKit <= 3.15.0.1 versions
9.3
Critical
CVE-2025-66067
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman Funnel…
6.5
Medium