Threats tagged 'ghsa-6534-m2vq-3r2h'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.8	CVE-2026-123491Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an SQL injection vulnerability in GraphQL High8.82026-11-06GCVE DatabaseCVE-2026-123491 Craft CMS versions 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contain an SQL injection vulnerability in the GraphQL eager-loading feature. This flaw allows unauthenticated attackers to inject SQL expressions via a crafted select argument, potentially exposing sensitive database content such as password hashes and session tokens. Report on CVE-2026-123491 Vulnerability CWE-89 #ghsa-6534-m2vq-3r2h	GCVE Database	2026-11-06

Page 1 of 1