7.6
High
CVE-2025-49034 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Funnel…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Funnel Builder by FunnelKit funnel-builder allows SQL Injection.This issue affects Funnel Builder by FunnelKit: from n/a through <= 3.10.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Funnel Builder by FunnelKit 3.10 | earliest → 3.10.2 | No fix stated |
| Funnel Builder by FunnelKit 3.10 | earliest → 3.10.2 | No fix stated |
Other CVEs of Funnel Builder by FunnelKit
The 8 CVEs of Funnel Builder by FunnelKit →
CVE-2026-57816
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FunnelKit Funnel…
7.1
High
CVE-2026-56052
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Funnel…
7.6
High
CVE-2026-48966
Unauthenticated Cross Site Scripting (XSS) in Funnel Builder by FunnelKit <= 3.15.0.2 versions
7.1
High
CVE-2026-42381
Unauthenticated SQL Injection in Funnel Builder by FunnelKit <= 3.15.0.1 versions
9.3
Critical