7.6
High
CVE-2025-68496 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Syed Balkhi User…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Syed Balkhi User Feedback userfeedback-lite allows Blind SQL Injection.This issue affects User Feedback: from n/a through <= 1.10.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| User Feedback 1.10 | earliest → 1.10.0 | No fix stated |
Other CVEs of User Feedback
The 4 CVEs of User Feedback →
CVE-2026-39476
Missing Authorization vulnerability in Syed Balkhi User Feedback userfeedback-lite allows Exploiting Incorrectly…
4.3
Medium
CVE-2026-39475
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Syed Balkhi User…
7.6
High
CVE-2023-50887
Missing Authorization vulnerability in Syed Balkhi User Feedback userfeedback-lite allows Exploiting Incorrectly…
5.3
Medium