Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-51626 EUVD-2026-1681GHSA-88jg-rrgx-r8v9

SQL injection vulnerability in pss.sale.com 1.0 via the id parameter to the userfiles/php/cancel_order.php endpoint.

Published Jan 9, 2026 · Updated Jan 9, 2026 · Assigned by mitre