7.6
Élevée
CVE-2025-49034 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Funnel…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Funnel Builder by FunnelKit funnel-builder allows SQL Injection.This issue affects Funnel Builder by FunnelKit: from n/a through <= 3.10.2.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Funnel Builder by FunnelKit 3.10 | premières → 3.10.2 | Pas de correctif indiqué |
| Funnel Builder by FunnelKit 3.10 | premières → 3.10.2 | Pas de correctif indiqué |
Autres CVE de Funnel Builder by FunnelKit
Les 8 CVE de Funnel Builder by FunnelKit →
CVE-2026-57816
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FunnelKit Funnel…
7.1
Élevée
CVE-2026-56052
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Funnel…
7.6
Élevée
CVE-2026-48966
Unauthenticated Cross Site Scripting (XSS) in Funnel Builder by FunnelKit <= 3.15.0.2 versions
7.1
Élevée
CVE-2026-42381
Unauthenticated SQL Injection in Funnel Builder by FunnelKit <= 3.15.0.1 versions
9.3
Critique