WebVella-ERP vulnerabilities

CVEs whose affected-version data names the WebVella-ERP package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111700High· 7.1

2d ago

WebVella ERP through 1.8.8 SQL Injection via EQL Query API

WebVella ERP through 1.8.8 contains an sql injection vulnerability that allows any authenticated user to inject SQL through WHERE-clause text literals in the EQL query API. Attackers can send crafted single-quoted literals to POST /api/v…

▾ TwilightWebVella · WebVella-ERPEPSS 0.22%via CVEORG