CVE-2024-37765

Machform versions up to v19 are vulnerable to an authenticated Blind SQL injection located on the user account settings page (my_account.php). The root cause is the improper neutralization of special elements in the _user_admin_theme parameter, allowing an attacker to inject SQL queries. Exploita...