FTS3 Web Monitoring (fts-monitoring) versions 3.12.0 through 3.13.2 and 3.14.0 contain an unauthenticated sql injection vulnerability in the /linkinfo endpoint handled by get_linkinfo.
CVSS 4.0HIGH 8.7·Network·No auth·No interaction·EPSS 0.00395·Published 2026-11-06·Fixed in 3.13.3, 3.14.1CWE-89