1 matches found
GHSA-C9W5-RWH3-7PM9 CodeIgniter: SQL injection in Query Builder deleteBatch() when used with where() conditions
Impact A SQL injection vulnerability exists in the Query Builder's deleteBatch method. When deleteBatch is used together with where conditions, the bound values from the WHERE clause are substituted directly into the generated SQL with their escape flag ignored, so they are never escaped or quote...
9.4CVSS6AI score0.00612EPSS
SaveExploits0References5
20