Description
Improper neutralization of special elements used in an SQL command (-SQL injection-) vulnerability in Loca Software Informatics Technology Ltd. Co. CMS allows SQL Injection. This issue affects CMS: through 06082026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS 9.8EPSS 0.265%Risk 1
View source- Published
- 2026-08-06 14:16:36
- Last modified
- 2026-08-06 16:16:44
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H