Critical severityNVD Advisory· Published Dec 11, 2025· Updated Apr 15, 2026

CVE-2024-58290

Description

Xhibiter NFT Marketplace 1.10.2 contains a SQL injection vulnerability in the collections endpoint that allows attackers to manipulate database queries through the 'id' parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to potentially extract or manipulate database information by sending crafted payloads to the collections page.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Xhibiter/Xhibiter NFT Marketplacellm-create
Range: =1.10.2

Patches

Vulnerability mechanics

References

elements.envato.com/xhibiter-nft-marketplace-html-template-AQN45FAnvd
www.exploit-db.com/exploits/52060nvd
www.vulncheck.com/advisories/xhibiter-nft-marketplace-sql-injection-via-collections-endpointnvd

News mentions

No linked articles in our index yet.

cvss	0.585
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000