CVE-2026-85379: SQL Injection in light0011 cms

This vulnerability exists in the Query Builder component of light0011 cms, specifically in the ChapterModel::searchChapter function. By manipulating the 'content' parameter, an attacker can inject SQL commands remotely, potentially compromising the database. The product lacks versioning, so precise affected versions are unknown. The vulnerability was responsibly disclosed but remains unpatched as of the publication date. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, with low confidentiality, integrity, and availability impact. Exploit code has been publicly released, increasing the risk of exploitation.

Successful exploitation could allow an attacker to execute arbitrary SQL commands on the backend database remotely, potentially leading to unauthorized data access or modification. The impact is rated medium severity with low confidentiality, integrity, and availability impact according to the CVSS 4.0 vector. No known active exploitation in the wild has been reported yet.

No official fix or patch is currently available as the vendor has not responded to the issue report. Users should monitor the vendor's communications for any forthcoming patches. Until a patch is released, consider applying web application firewall (WAF) rules to detect and block SQL injection attempts targeting the vulnerable function. Review and restrict input validation on the 'content' parameter if possible.