Threats tagged 'ghsa-6xvj-8vch-9qmf'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.4%	CVE-2026-118192The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to generic SQL Medium6.5EPSS 0.4%2026-10-29GCVE DatabaseCVE-2026-118192 The JoomSport plugin for WordPress versions up to and including 5.7.11 contains a SQL Injection vulnerability via the 'team_id' parameter. This flaw allows authenticated users with contributor-level access or higher to inject additional SQL queries due to insufficient input escaping and query preparation. The vulnerability is triggered when a season lacks an associated joomsport_tournament term, which is the default for new seasons. EPSS 0.4%Report on CVE-2026-118192 Vulnerability CWE-89 #ghsa-6xvj-8vch-9qmf	GCVE Database	2026-10-29

Page 1 of 1