CVE-2026-59075

Edito CMS is vulnerable to a Dynamic LINQ injection flaw caused by improper input validation. An authenticated attacker can inject conditional expressions into the sort parameter of paginated administrative endpoints. By analyzing the resulting order of the returned data, an attacker can extract ...