← All advisories

High severity8.8NVD Advisory· Published Aug 6, 2021· Updated Jun 17, 2026

CVE-2021-36455

CVE-2021-36455

Description

SQL Injection vulnerability in Naviwebs Navigate CMS 2.9 via the quicksearch parameter in \lib\packages\comments\comments.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Naviwebs/Navigatecms3 versions
cpe:2.3:a:naviwebs:navigate_cms:2.9:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:naviwebs:navigate_cms:2.9:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: <2.9.4

Patches

Vulnerability mechanics

References

2

github.com/NavigateCMS/Navigate-CMS/issues/25nvdExploitThird Party Advisory
www.navigatecms.com/en/blog/development/navigate_cms_update_2_9_4nvdVendor Advisory

News mentions

0

No linked articles in our index yet.