Security Advisory

CVE-2026-52630

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-11 00:00:00

Last updated 2026-09-14 16:21:39

Assigner mitre

CVSS score 9.8

State PUBLISHED

Description

SQL Injection vulnerability in Woltlab WCF v.6.2.4 and before allows a remote attacker to updateUserOptions in UserEditor.class.php and the update action in UserAction.class.php

← Browse all CVEs View on cve.org ↗