CVE-2026-76173

A Blind SQL injection vulnerability exists in the WhatsApp module for Dolibarr 1.9 (developed by Sgestion / EasySoft). The flaw is located in the public endpoint public/webhook/receiver.php, where the data.key.remoteJid parameter from a JSON request is processed without proper escaping or paramet...