CVE-2026-6202

MediumCVSS 6.3

Published: 13/04/2026(UTC)Updated: 26/10/2026(UTC)Translated: 27/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

9th percentile - higher than 9% of all known CVEs

Summary

A vulnerability was discovered in code-projects Easy Blog Site 1.0 in post.php where manipulation of the tags argument leads to SQL injection. The attack can be initiated remotely and a public exploit is available.

Risk Assessment

Potential unauthorized database queries, data leakage or modification, and application compromise. Public exploit availability increases attack likelihood.

Recommendation

Apply the vendor fix or temporarily disable the vulnerable file/function. Enforce input validation and WAF rules to block SQL injection.

Other vulnerabilities in Easy Blog Site

CVE-2026-5805High
A weakness has been identified in code-projects Easy Blog Site up to version 1.0 in the file /users/contact_us.php. Manipulation of the Name argument leads to SQL injection. The attack can be launched remotely and the exploit is publicly available.

Original NVD description (English source)

A security flaw has been discovered in code-projects Easy Blog Site 1.0. This affects an unknown function of the file post.php. Performing a manipulation of the argument tags results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS