Veille CVE

Lundi 19 octobre 2026

2 CVE

  1. CVE-2026-109894 9.3 Critique

    Arraytics Booktics

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics booktics allows SQL Injection.This issue affects Booktics: from n/a through 1.0.29.

  2. CVE-2026-109895 7.1 Élevée

    Arraytics Booktics

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics Booktics booktics allows DOM-Based XSS.This issue affects Booktics: from n/a through 1.0.29.