CVE-2026-52630

CVE-2026-52630 is a SQL Injection vulnerability in Woltlab WCF (Woltlab Community Framework) affecting versions 6.2.4 and before . The vulnerable code resides in updateUserOptions within UserEditor.class.php and the update action in UserAction.class.php , allowing a remote attacker to inject SQL....

EUVD-2026-76701

SQL Injection vulnerability in Woltlab WCF v.6.2.4 and before allows a remote attacker to updateUserOptions in UserEditor.class.php and the update action in UserAction.class.php...

EUVD-2025-203921

ChurchCRM is an open-source church management system. Prior to version 6.5.3, a SQL injection vulnerability exists in the src/UserEditor.php file. When an administrator saves a user's configuration settings, the keys of the type POST parameter array are not properly sanitized or type-casted befor...