← Back to CVE search

CVE-2026-52472

Wgcloud

Description

SQL injection vulnerability in Wgcloud 3.6.4 allows a remote attacker to escalate privileges via the PortInfoMapper.xml file

CVSS 9.8EPSS 0.383%Risk 1.01
View source
Published
2026-07-21 21:16:51
Affected versions
<3.6.5
Type
Web application
Last modified
2026-07-22 20:50:36
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H