CVE-2026-38467

CVE-2026-38467 is a SQL injection vulnerability in the tags manager of GazellePW (GazellePosterWall), specifically in commit 86c4bedf. Remote authenticated users holding users_mod privileges can execute arbitrary SQL commands by crafting a POST request to tools.php?action=manage_tags using the ta...