CVE-2023-34752

bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the lid parameter at admin/index.php?mode=settings&page=lang&action=edit.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-06-14

Last modified

2026-07-09

Weaknesses

CWE-89

Affected products

• Bloofoxcms (Bloofox)

References

• https://ndmcyb.hashnode.dev/bloofox-v0521-was-discovered-to-contain-many-sql-injection-vulnerability
• https://www.bloofox.com/