CVE-2020-37243 WordPress Plugin Supsystic Pricing Table 1.8.7 SQL Injection XSS

Supsystic Pricing Table 1.8.7 contains an SQL injection vulnerability in the 'sidx' GET parameter that allows unauthenticated attackers to execute arbitrary SQL queries through the getListForTbl action. The plugin also contains stored cross-site scripting vulnerabilities in the 'Edit name' and...

CVE-2020-37243 WordPress Plugin Supsystic Pricing Table 1.8.7 SQL Injection XSS

Supsystic Pricing Table 1.8.7 contains an SQL injection vulnerability in the 'sidx' GET parameter that allows unauthenticated attackers to execute arbitrary SQL queries through the getListForTbl action. The plugin also contains stored cross-site scripting vulnerabilities in the 'Edit name' and...

PostgreSQL REFRESH PUBLICATION allows SQL injection via table name

...

PT-2026-41443

Name of the Vulnerable Software and Affected Versions Supsystic Pricing Table version 1.8.7 Description An SQL injection flaw exists in the 'sidx' GET parameter, enabling unauthenticated attackers to execute arbitrary SQL queries via the 'getListForTbl' action. Additionally, stored cross-site...

WordPress plugin Supsystic Pricing Table SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

CVE-2020-37243: Improper Neutralization of Special Elements used in an SQL Command

Supsystic Pricing Table 1.8.7 contains an SQL injection vulnerability in the 'sidx' GET parameter that allows unauthenticated attackers to execute arbitrary SQL queries through the getListForTbl action. The plugin also contains stored cross-site scripting vulnerabilities in the 'Edit name' and...

com.datasqrl:sqrl-discovery (>=0.9.0-alpha1, <=0.9.0-alpha2), com.datasqrl:sqrl-planner (>=0.9.0-alpha1, <=0.9.0-alpha2) +2 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-planner_2.12 (>=2.1.0, <=2.1.1)

org.apache.flink:flink-table-planner2.12 MAVEN version =2.1.0, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =2.1.0, =2.1.1 Source cves: CVE-2026-35194 Source advisory: SNYK:JAVA-ORGAPACHEFLINK-16799799...

org.apache.flink:flink-examples-table_2.12 (>=2.0.0, <=2.0.1) potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-planner_2.12 (>=2.0.0, <=2.0.1)

org.apache.flink:flink-table-planner2.12 MAVEN version =2.0.0, =2.0.0, =2.0.1 Source cves: CVE-2026-35194 Source advisory: GHSA-2F54-V4HM-FX73...

org.apache.flink:flink-examples-table_2.12 (>=2.0.0, <=2.0.1) potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-planner_2.12 (>=2.0.0, <=2.0.1)

org.apache.flink:flink-table-planner2.12 MAVEN version =2.0.0, =2.0.0, =2.0.1 Source cves: CVE-2026-35194 Source advisory: SNYK:JAVA-ORGAPACHEFLINK-16799799...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the SQL code generation process. An attacker can execute arbitrary code on TaskManagers by submitting specially crafted SQL queries that exploit improper escaping of user-controlled strings in generated Java...

com.datasqrl.flinkrunner:stdlib-json (>=0.9.0-alpha1, <=0.9.0-alpha2), com.datasqrl:sqrl-discovery (>=0.9.0-alpha1, <=0.9.0-alpha2) +15 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-runtime (>=2.1.0, <=2.1.1)

org.apache.flink:flink-table-runtime MAVEN version =2.1.0, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =26.0.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.1 and more Source cves: CVE-2026-35194 Source advisory: SNYK:JAVA-ORGAPACHEFLINK-16799797...

com.datasqrl.flinkrunner:stdlib-json (>=0.9.0, <=0.10.1), com.datasqrl:sqrl-discovery (>=0.9.0, <=0.10.4) +18 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-runtime (2.2.0)

org.apache.flink:flink-table-runtime MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.flink:flink-table-runtime and may be impacted: - com.datasqrl.flinkrunner:stdlib-json =0.9.0, =0.9.0, =0.9.0, =0.9.0,...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the SQL code generation process. An attacker can execute arbitrary code on TaskManagers by submitting specially crafted SQL queries that exploit improper escaping of user-controlled strings in generated Java...

cn.ibizlab.plugin:ibiz-dataflow-flink (>=8.1.0.371, <=8.1.0.567.22), cn.sliew:flinkful-cli-descriptor-examples (>=1.0.2, <=1.0.7) +193 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-runtime (>=1.15.0, <=1.20.3)

org.apache.flink:flink-table-runtime MAVEN version =1.15.0, =8.1.0.371, =1.0.2, =1.0.3, =1.0.0, =1.0.2, =0.5.0, =0.5.0, =1.4.0, =1.4.0, =1.6.1, =1.4.0, =0.1.45, =0.1.47 - com.daasyyds.flink:flink-sql-analyzer 1.15.1-2022.07.1 and more Source cves: CVE-2026-35194 Source advisory:...

cn.sliew:flinkful-cli-descriptor-examples (>=1.0.2, <=1.0.7), cn.sliew:flinkful-sql-catalog (>=1.0.3, <=1.0.7) +103 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-planner_2.12 (>=1.15.0, <=1.20.3)

org.apache.flink:flink-table-planner2.12 MAVEN version =1.15.0, =1.0.2, =1.0.3, =1.0.0, =1.0.2, =1.0, =0.1, =0.6.1, =0.6.1, =1.17-2.5.2, =2.5.1-flink-1.17 and more Source cves: CVE-2026-35194 Source advisory: OSV:GHSA-2F54-V4HM-FX73...

com.datasqrl.flinkrunner:stdlib-json (>=0.9.0-alpha1, <=0.9.0-alpha2), com.datasqrl:sqrl-discovery (>=0.9.0-alpha1, <=0.9.0-alpha2) +15 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-runtime (>=2.1.0, <=2.1.1)

org.apache.flink:flink-table-runtime MAVEN version =2.1.0, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =26.0.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.1 and more Source cves: CVE-2026-35194 Source advisory: OSV:GHSA-2F54-V4HM-FX73...

com.datasqrl.flinkrunner:stdlib-json (>=0.9.0-alpha1, <=0.9.0-alpha2), com.datasqrl:sqrl-discovery (>=0.9.0-alpha1, <=0.9.0-alpha2) +15 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-runtime (>=2.1.0, <=2.1.1)

org.apache.flink:flink-table-runtime MAVEN version =2.1.0, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =26.0.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.1 and more Source cves: CVE-2026-35194 Source advisory: GHSA-2F54-V4HM-FX73...

cn.ibizlab.plugin:ibiz-dataflow-flink (>=8.1.0.371, <=8.1.0.567.22), cn.sliew:flinkful-cli-descriptor-examples (>=1.0.2, <=1.0.7) +193 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-runtime (>=1.15.0, <=1.20.3)

org.apache.flink:flink-table-runtime MAVEN version =1.15.0, =8.1.0.371, =1.0.2, =1.0.3, =1.0.0, =1.0.2, =0.5.0, =0.5.0, =1.4.0, =1.4.0, =1.6.1, =1.4.0, =0.1.45, =0.1.47 - com.daasyyds.flink:flink-sql-analyzer 1.15.1-2022.07.1 and more Source cves: CVE-2026-35194 Source advisory: GHSA-2F54-V4HM-FX...

com.datasqrl:sqrl-discovery (>=0.9.0-alpha1, <=0.9.0-alpha2), com.datasqrl:sqrl-planner (>=0.9.0-alpha1, <=0.9.0-alpha2) +2 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-planner_2.12 (>=2.1.0, <=2.1.1)

org.apache.flink:flink-table-planner2.12 MAVEN version =2.1.0, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =2.1.0, =2.1.1 Source cves: CVE-2026-35194 Source advisory: GHSA-2F54-V4HM-FX73...

com.datasqrl:sqrl-discovery (>=0.9.0, <=0.10.4), com.datasqrl:sqrl-planner (>=0.9.0, <=0.10.4) +6 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-planner_2.12 (2.2.0)

org.apache.flink:flink-table-planner2.12 MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.flink:flink-table-planner2.12 and may be impacted: - com.datasqrl:sqrl-discovery =0.9.0, =0.9.0, =0.9.0, =0.2.0, =0.2.0, =0.2.0,...