CVE-2026-94115

Summary

This flaw allows SQL injection, enabling an attacker to execute arbitrary SQL commands, potentially leading to data theft or corruption.

Exploitability

Exploitation requires access to the web application and knowledge of the SQL injection vulnerability. Precondition is the use of an affected version of Easy Pricing Tables.

Blast radius

If exploited, the impact could be significant, including data loss or corruption, as the attacker could manipulate the underlying database.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Easy Pricing Tables version 4.1.3 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.