CVE-2026-126370

The Vvveb content management system, versions through 1.0.8.6 , is vulnerable to Remote Code Execution (RCE) via a .sql Code Injection flaw in the editor/code/save function. This vulnerability allows users with restricted site_admin roles to inject PHP code by saving .sql files through the admin ...