MegaCMS vulnerabilities

1 known vulnerability in MegaCMS from CRM Sistemas de Fidelización. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  MegaCMS: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-3325Apr 29, 2026CRM Sistemas de Fidelización

  SQL injection (SQLi) in MegaCMS v12.0.0, specifically in the “id_territorio” parameter of the “/web_comunications/cms/get_provincias” endpoint. The vulnerability arises from inadequate validation and sanitisation of user input. Specifically, via a POST request