7.6
Élevée
CVE-2026-39475 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Syed Balkhi User…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Syed Balkhi User Feedback userfeedback-lite allows Blind SQL Injection.This issue affects User Feedback: from n/a through <= 1.10.1.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| User Feedback 1.10 | premières → 1.10.1 | Pas de correctif indiqué |
Autres CVE de User Feedback
Les 4 CVE de User Feedback →
CVE-2026-39476
Missing Authorization vulnerability in Syed Balkhi User Feedback userfeedback-lite allows Exploiting Incorrectly…
4.3
Moyenne
CVE-2025-68496
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Syed Balkhi User…
7.6
Élevée
CVE-2023-50887
Missing Authorization vulnerability in Syed Balkhi User Feedback userfeedback-lite allows Exploiting Incorrectly…
5.3
Moyenne