Description (CNA)
Project-nexus is a general-purpose blog website framework. Affected versions are subject to SQL injection due to a lack of sensitization of user input. This issue has not yet been patched. Users are advised to restrict user input and to upgrade when a new release becomes available.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| vinsdragonis / Project-Nexus | affected <= 1.0.1 |
CWE
CWE-89
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.