What is GHSA-722f-j64m-mq4x?

GHSA-722f-j64m-mq4x is a security advisory published by GitHub Security Advisories with Critical severity. An SQL Injection vulnerability exists in Redeight CMS version 1.0 via the "userEmail" parameter...

Which CVE IDs does GHSA-722f-j64m-mq4x cover?

GHSA-722f-j64m-mq4x covers the following CVE IDs: CVE-2026-53690. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-722f-j64m-mq4xCritical

An SQL Injection vulnerability exists in Redeight CMS version 1.0 via the "userEmail" parameter...

Vendor

GitHub Security Advisories

Published

June 30, 2026

Last Modified

June 30, 2026

🔗 CVE IDs covered (1)

CVE-2026-53690 →

📋 Description

An SQL Injection vulnerability exists in Redeight CMS version 1.0 via the "userEmail" parameter in the POST "/admin/index.php" login endpoint. The application fails to sanitize user input and directly interpolates it into SQL queries without using prepared statements, which allows unauthenticated remote attackers to execute arbitrary SQL commands and extract sensitive database information.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-53690
https://cert.pl/posts/2026/06/CVE-2026-53690
https://github.com/advisories/GHSA-722f-j64m-mq4x