Skip to content
OpenAdvisories

Product · elvinhaci

SQL Chart Builder

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-100158

    SQL Chart Builder <= 3.0.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SQL Chart Label (X-axis) via Stored User Field

    The SQL Chart Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-axis column value ($value->$xarg_s from $wpdb->get_results())' parameter in all versions up to, and including, 3.0.6 due to insufficient input sanitization and …

    elvinhaci SQL Chart Builder Web / CMS
  • Medium 6.5
    CVE-2024-11430

    SQL Chart Builder <= 2.3.6 - Authenticated (Contributor+) SQL Injection

    The SQL Chart Builder plugin for WordPress is vulnerable to SQL Injection via the 'arg1' arg of the 'gvn_schart_2' shortcode in all versions up to, and including, 2.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient prepara…

    elvinhaci SQL Chart Builder Web / CMS