cbcvebase.
CVE-2026-32399
published 2026-03-13

CVE-2026-32399: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant…

PriorityP353high8.5CVSS 3.1
AVNACLPRLUINSCCHINAL
EPSS
0.23%
13.5th percentile
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Blind SQL Injection.This issue affects Media LIbrary Assistant: from n/a through <= 3.32.

Affected

1 ranges
VendorProductVersion rangeFixed in
david_lingrenmedia_library_assistant<= 3.32
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.