funadmin vulnerabilities

CVEs whose affected-version data names the funadmin package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-121610High· 7.3

3d ago

funadmin Frontend List Endpoint index selectList sql injection

A security flaw has been discovered in funadmin 7.1.0. Impacted is the function Curd::selectList of the file /frontend/ajax/index of the component Frontend List Endpoint. The manipulation of the argument selectFields results in sql injec…

▾ TwilightEPSS 0.25%via CVEORG