8.5
High
CVE-2026-94663 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid: from n/a through 6.0.0.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ProfileGrid 6.0 | earliest → 6.0.0.2 | No fix stated |
Other CVEs of ProfileGrid
The 27 CVEs of ProfileGrid →
CVE-2026-62061
Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid…
5.3
Medium
CVE-2026-57697
Authentication Bypass Using an Alternate Path or Channel vulnerability in Metagauss ProfileGrid …
7.5
High
CVE-2026-57759
Cross-Site Request Forgery (CSRF) vulnerability in Metagauss ProfileGrid…
8.8
High
CVE-2026-25417
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagauss…
6.5
Medium