TI-2018-15404 CVE-2018-25179 · GHSA-h398-hg8g-8h2wGumbo CMS 0.99 SQL Injection via settings endpointPriority HIGH 77Gumbo CMS 0.99 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the language parameter.CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.0027 · Published 2026-03-06 · No fix listed CWE-89