CVE-2026-14749

Name of the Vulnerable Software and Affected Versions mjperpinosa stumasy versions up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be

Description A remote code injection issue exists due to the improper handling of the mathematical sentence argument within the eval() function located in the application/pages/imba calculator/calculate.php file.

Recommendations As a temporary workaround, restrict access to the eval() function in the application/pages/imba calculator/calculate.php file or avoid using the mathematical sentence argument until a fix is released. At the moment, there is no information about a newer version that contains a fix for this vulnerability.