CVE-2026-129180
HIGH
NVD
CVSS Score
7.3
Severity
HIGH
Published
Nov 13, 2026
Vendor
unknown
Description
A flaw has been found in projectworlds Visitor Management System 1.0. This vulnerability affects the function mysqli_query of the file actionpage.php. This manipulation of the argument purpose causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.