CVE-2026-6202

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

A security flaw has been discovered in code-projects Easy Blog Site 1.0. This affects an unknown function of the file post.php. Performing a manipulation of the argument tags results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-74 CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Apr 13, 2026
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-620208.1Unauthenticated Local File Inclusion in TouchUp < 1.4 versions.CVE-2026-620218.8Subscriber PHP Object Injection in Angio <= 1.1.1 versions.CVE-2026-620229.8Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions.CVE-2026-620249.9Subscriber Arbitrary File Upload in CodeBard Help Desk <= 1.1.2 versions.CVE-2026-620259.0Unauthenticated Arbitrary File Upload in Tailored Tools <= 3.0.3 versions.CVE-2026-620267.1Cross-Site Request Forgery (CSRF) vulnerability in MIGHTYminnow Dashboard Notes dashboard-notes allows Cross Site Request Forgery.This issue CVE-2026-620277.1Unauthenticated Cross Site Scripting (XSS) in Team Section Block <= 2.0.4 versions.CVE-2026-620285.4Missing Authorization vulnerability in bPlugins Before After Image Comparison – Image comparison for WP before-after-image-compare allows Ex CVE-2026-620296.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFunnels Team WPFunnels wpfunnels all CVE-2026-62036.1The User Registration & Membership plugin for WordPress is vulnerable to Open Redirect in versions up to and including 5.1.4. This is due to CVE-2026-620307.2Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions.CVE-2026-620319.3Unauthenticated SQL Injection in uListing <= 2.2.0 versions.