CVE-2026-78837

AppNitro MachForm v30 is affected by a remote SQL injection vulnerability in the filter[filters][0][field] parameter of grid_datasource.php. An unauthenticated attacker can craft a SQL statement to enumerate valid column names in the ap_form_{id} table, gaining access to sensitive database inform...