9.3
Critical
CVE-2026-96328 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in jegtheme JNews -…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in jegtheme JNews - Pay Writer jnews-pay-writer allows Blind SQL Injection.This issue affects JNews - Pay Writer: from n/a through 12.0.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| JNews - Pay Writer 12.0 | earliest → 12.0.1 | No fix stated |