Threats tagged 'ghsa-5cxc-jwxr-pc7p'

Cameasy Liketea version 1.0.0 contains a SQL injection vulnerability in the API endpoint implemented in the StoreController.php file. The flaw arises from improper handling of the lng/lat arguments in the list function, allowing remote attackers to manipulate SQL queries. Public exploit code has been disclosed. The vulnerability has a CVSS score of 7.3, indicating high severity.