CVE-2026-129180

CVSS 7.3 (high) · published 2026-11-13

A flaw has been found in projectworlds Visitor Management System 1.0. This vulnerability affects the function mysqli_query of the file actionpage.php. This manipulation of the argument purpose causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.

Weakness: CWE-74, CWE-89

Source: NVD CVE-2026-129180

References

• https://vuldb.com/cve/CVE-2026-129180
• https://vuldb.com/submit/1042435
• https://vuldb.com/vuln/437210
• https://vuldb.com/vuln/437210/cti

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.