CVE Catalog
CVE-2026-32471
HighCVSS 8.5Summary
SQL Injection vulnerability in ProLancer Element versions up to 1.4.8, exploitable by a user with Subscriber role.
Risk Assessment
An attacker with a subscriber account can manipulate SQL queries, potentially leading to unauthorized data access or modification.
Recommendation
Update ProLancer Element to the latest version that includes a fix for this vulnerability.
Other vulnerabilities in ProLancer Element
Original NVD description (English source)
Subscriber SQL Injection in ProLancer Element <= 1.4.8 versions.