Skip to content

Vendor

webvella vulnerabilities

1 published CVE affecting webvella, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of webvella alerts

Products

Latest webvella CVEs

Newest publication first

  1. CVE-2026-111700 WebVella ERP through 1.8.8 SQL Injection via EQL Query API

    Published
    HighCVSS 7.1 EPSS 0.27%

    WebVella ERP through 1.8.8 contains an sql injection vulnerability that allows any authenticated user to inject SQL through WHERE-clause text literals in the EQL query API. Attackers can send crafted single-quoted literals to POST /api/v3/en_US/eql, escaping the unsanitized EqlBu...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.