Read the docs

WebVella

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

WebVella records in CISA KEV

No WebVella vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-75486 CVE-2026-111700 · GHSA-5hxh-2p25-4hxp

SQL injection in WebVella ERP EQL query API

Priority MEDIUM 64

WebVella ERP through 1.8.8 contains an sql injection vulnerability that allows any authenticated user to inject SQL through WHERE-clause text literals in the EQL query API.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0027 Published 2026-10-16 No fix listed CWE-89
Open these records in search →