← Back to CVE search

CVE-2026-2395

Xpoda No Code Platform

Description

Improper neutralization of special elements used in an SQL command (-SQL injection-) vulnerability in Xpoda Türkiye Informatics Technology Inc. No Code Platform allows SQL Injection. This issue affects No Code Platform: from 4.1.3 before 4.1.4.

CVSS 9.8EPSS 0.35400000000000004%Risk 1.01
View source
Published
2026-07-22 15:16:54
Affected versions
>=4.3.1.0,<20260723
Type
Web application
Last modified
2026-07-30 12:18:02
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H