CVE-2026-121610

A security flaw exists in funadmin 7.1.0 within the Frontend List Endpoint component. Specifically, the Curd::selectList function located in the file /frontend/ajax/index is vulnerable to SQL injection due to the improper manipulation of the selectFields argument. This vulnerability can be exploi...