CVE-2026-94388

Summary

A SQL injection vulnerability in Green Popups allows attackers to perform blind SQL injection attacks, potentially leading to unauthorized data access and manipulation. This critical flaw affects versions before 7.6.3 and can be exploited remotely without authentication.

Exploitability

Exploitation is relatively straightforward with no special preconditions required, as the vulnerability allows blind SQL injection that can be leveraged through remote unauthenticated access.

Blast radius

The impact could be significant across all Green Popups installations using affected versions, potentially exposing sensitive data and allowing attackers to manipulate database contents through crafted SQL commands.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 7.6.3 or later to remediate the SQL injection vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.