Threats tagged 'ghsa-4vp4-w75c-2pjq'

CVE-2026-65546 is a critical unauthenticated SQL Injection vulnerability affecting Qode Tours versions up to and including 3.1.3.1. This flaw allows remote attackers to inject malicious SQL commands without authentication, potentially leading to high confidentiality impact and limited availability impact. No official patch or remediation guidance is currently available from the vendor.