cleantalk
Vulnerabilities and Security Researches

AnyComment, CVE-2025-48091

CVE, Research URL

CVE-2025-48091

Application

AnyComment

Published on
Oct 22, 2025
Research Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alexander AnyComment anycomment allows SQL Injection.This issue affects AnyComment: from n/a through <= 0.3.6.
Affected versions
max 0.3.6.
Status
vulnerable