Description
ApiAdmin v.5.0 and before is vulnerable to SQL Injection in the user-list endpoint GET /admin/User/getUsers via the gid parameter.
Medium · 6.5
CVE-2026-88397
EUVD-2026-92467GHSA-jc6j-fm24-c7gp
ApiAdmin v.5.0 and before is vulnerable to SQL Injection in the user-list endpoint GET /admin/User/getUsers via the gid parameter.
Published Oct 5, 2026 · Updated Oct 6, 2026 · Assigned by mitre