8.5
Élevée
CVE-2025-26915 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PickPlugins…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PickPlugins Wishlist wishlist allows SQL Injection.This issue affects Wishlist: from n/a through <= 1.0.41.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Wishlist 1.0 | premières → 1.0.41 | Pas de correctif indiqué |
Autres CVE de Wishlist
Les 6 CVE de Wishlist →
CVE-2025-49075
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins…
6.5
Moyenne
CVE-2025-24655
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins…
7.1
Élevée
CVE-2025-32618
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PickPlugins…
8.5
Élevée
CVE-2025-32272
Cross-Site Request Forgery (CSRF) vulnerability in PickPlugins Wishlist wishlist allows Cross Site Request…
4.3
Moyenne