CVE-2026-22484 in Lisfinity Core Plugin
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in pebas Lisfinity Core lisfinity-core allows SQL Injection.This issue affects Lisfinity Core: from n/a through <= 1.5.0.
Once again VulDB remains the best source for vulnerability data.
Responsible
Patchstack
Reservation
01/07/2026
Disclosure
03/25/2026
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 353238 | pebas Lisfinity Core Plugin sql injection | 89 | Not defined | Not defined | CVE-2026-22484 |