CVE-2026-62048
Critical · 9.3CVSS
9.3
EPSS
0.3%
Published
Nov 1, 2026
CISA due date
—
The record
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP BookIt bookit allows SQL Injection.This issue affects BookIt: from n/a through 2.6.0.6.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-121731 RosarioSIS before 12.9 contains a sql injection vulnerability that allows authenticated… CWE-89
- CVE-2026-121524 A flaw has been found in sumiie24 School-Management-System up to… CWE-89
- CVE-2026-121502 A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project. CWE-89
- CVE-2026-45146 Chamilo LMS is an open-source learning management system. CWE-89
- CVE-2026-44265 Elo is a purely functional expression language for no-code tools. CWE-89
- CVE-2026-109594 Post-authentication Improper Neutralization of Special Elements used in an SQL Command… CWE-89
- CVE-2026-65139 NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD… CWE-89
- CVE-2026-110265 A specially crafted malformed search query could return results from outside a user's… CWE-89