CVE-2026-6202

CWE-74CWE-89 — SQL Injection4 documents4 sources
Severity
5.3MEDIUM
EPSS
0.0%
top 92.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Code-projects Easy Blog Site
Timeline
PublishedApr 13

Description

A security flaw has been discovered in code-projects Easy Blog Site 1.0. This affects an unknown function of the file post.php. Performing a manipulation of the argument tags results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages1 packages

🔴Vulnerability Details

3
GHSA
GHSA-mjj7-5jqv-3ff6: A security flaw has been discovered in code-projects Easy Blog Site 1↗2026-04-13
▶
CVEList
code-projects Easy Blog Site post.php sql injection↗2026-04-13
▶
VulDB
code-projects Easy Blog Site 1.0 post.php tags sql injection↗2026-04-13
▶
CVE-2026-6202 (MEDIUM CVSS 5.3) | A security flaw has been discovered | cvebase.io