8.5
High
CVE-2025-39586 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows SQL Injection.This issue affects ProfileGrid : from n/a through <= 5.9.4.8.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ProfileGrid 5.9 | earliest → 5.9.4.8 | No fix stated |
Other CVEs of ProfileGrid
The 27 CVEs of ProfileGrid →
CVE-2026-94663
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss…
8.5
High
CVE-2026-62061
Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid…
5.3
Medium
CVE-2026-57697
Authentication Bypass Using an Alternate Path or Channel vulnerability in Metagauss ProfileGrid …
7.5
High
CVE-2026-57759
Cross-Site Request Forgery (CSRF) vulnerability in Metagauss ProfileGrid…
8.8
High