VULNERABILITY INTELLIGENCE

CVE-2026-61630

CVSS score4.2 MEDIUM

EPSS probability0.32%

CISA KEVNot currently listed

Published2026-09-21

Last modified2026-09-24

Description

A vulnerability was identified in code-projects Lost and Found Thing Management 1.0. Affected by this issue is some unknown functionality of the file /catageory.php. Such manipulation of the argument cat leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.