medium5.3
CVE-2026-88756
Pagekit CMS <= 1.0.18 allows an unauthenticated attacker to perform SQL injection through the credentials array submitted to the public login endpoint (POST /u…
Impact
Pagekit CMS <= 1.0.18 allows an unauthenticated attacker to perform SQL injection through the credentials array submitted to the public login endpoint (POST /user/authenticate).
Affected products
| Product | Affected versions |
|---|---|
| Pagekit CMS | through 1.0.18 |
Versions were read from the advisory text. No structured product data has been published for this record yet.