CVE-2026-85379

Name of the Vulnerable Software and Affected Versions light0011 cms (affected versions not specified)

Description A security flaw exists in the Query Builder component within the file App/Home/Controller/ChapterController.class.php. The ChapterModel::searchChapter() function is susceptible to SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database. This issue occurs through the manipulation of the content argument and can be exploited remotely.

Recommendations As a temporary workaround, consider restricting the use of the ChapterModel::searchChapter() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.