WebVella vulnerabilities
We track 1 vulnerability in WebVella products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 16, 2026.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest WebVella vulnerabilities
- 7.1 High severity
WebVella-ERP: Improper Neutralization of Special Elements used in an SQL Command
WebVella ERP through 1.8.8 contains an sql injection vulnerability that allows any authenticated user to inject SQL through WHERE-clause text literals in the EQL query API. Attackers can send crafted single-quoted literals to POST /api/v3/en_US/eql, escaping t