Threats tagged 'ghsa-pxj7-m29r-hh4p'

CVE-2026-105149 is a medium severity SQL injection vulnerability in mooSocial affecting versions 3.2.0 through 3.2.4. The flaw exists in the processing of the /stores/all-products endpoint, specifically via manipulation of the rating argument. The vulnerability can be exploited remotely without authentication. Public exploit code is available, but no official vendor response or patch has been provided.