CVE-2026-40329

creationtimestamp| type| source ---|---|--- 2026-05-05 20:37:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml523ek6el2i...

CVE-2026-40329 SQL Injection vulnerability via sortBy in beanFeed

Masa CMS is an open source content management system. In versions 7.5.2 and earlier, a SQL injection vulnerability exists in the beanFeed.cfc component within the getQuery function's processing of the sortBy parameter. The application fails to properly sanitize or parameterize this input before...