6.5
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alexander AnyComment anycomment allows SQL Injection.This issue affects AnyComment: from n/a through <= 0.3.6.
Basic Information
ID
CVE-2025-48091
Source
Patchstack
Published
Oct 22, 2025 at 14:32
Modified
Oct 22, 2025 at 19:55
Affected Product
Vendor
Alexander
Product
AnyComment
Version
n/a
Affected Versions
Alexander AnyComment n/a