GHSA-x566-frf2-p8rwCriticalCVSS 9.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...

Published
February 9, 2026
Last Modified
June 5, 2026

🔗 CVE IDs covered (1)

📋 Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xpoda Türkiye Information Technology Inc. Xpoda Studio allows SQL Injection.This issue affects Xpoda Studio: through 09022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

🔗 References (4)