Threats tagged 'ghsa-5hxh-2p25-4hxp'

1 threat

Threats tagged 'ghsa-5hxh-2p25-4hxp'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.2%	CVE-2026-111700WebVella-ERP · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in WebVella… High7.1EPSS 0.2%2026-10-16CVE Database V5CVE-2026-111700 WebVella ERP versions up to and including 1.8.8 contain an SQL injection vulnerability in the EQL query API. Authenticated users can inject SQL via specially crafted single-quoted literals in the WHERE clause of EQL queries sent to the POST /api/v3/en_US/eql endpoint. This allows unauthorized reading of sensitive data such as user and role tables. The vulnerability has a high severity rating with a CVSS 4.0 score of 7.1. EPSS 0.2%Vulnerability WebVella #ghsa-5hxh-2p25-4hxp	CVE Database V5	2026-10-16

Showing 1–1 of 1 result