[CVE-2026-109688] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i…

Descripción técnica

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Blind SQL Injection.This issue affects Link Whisper Free: from n/a through 0.9.7.

Puntuación CVSS

Score: 9.3/10 — Severidad: CRITICAL — Estado NIST: Deferred

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Debilidades (CWE)

CWE-89

Fuente oficial

Publicado en NIST NVD.