中文

// CVE · PUBLISHED 2026-06-17

CVE-2026-54809

VillaTheme / GIFT4U

9.3 · CVSS 3.1Critical

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VillaTheme GIFT4U allows Blind SQL Injection. This issue affects GIFT4U: from n/a through 1.0.10.

References

Related CVEs

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.