CVE-2026-54349

The open-source web application Chartbrew is vulnerable to SQL injection in versions prior to 5.2.1 . The issue exists within the applyMysqlOrPostgresVariables function, where SQL dashboard-variable substitution unsafely processes attacker-controlled JavaScript replacement strings across various ...