CVE-2026-114242

HIGH 7.3

dhikshitha29 Insurance-Management-System editPlan.php mysqli_query sql injection

CVSS Score

7.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected is the function mysqli_query of the file /Admin/View/editPlan.php. Such manipulation of the argument Plan_no/Name leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.

CWE	CWE-89 CWE-74
Vendor	dhikshitha29
Product	insurance-management-system
Published	Oct 21, 2026

Stay Ahead of the Next One

Get instant alerts for dhikshitha29 insurance-management-system

Be the first to know when new high vulnerabilities affecting dhikshitha29 insurance-management-system are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

dhikshitha29 / Insurance-Management-System

91de5edda5baa109ad8e9baf03ce6a3ceda84183 125362cc21dca20d74091a4913a5096bb58dd837

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/424677 vuldb.com: https://vuldb.com/vuln/424677/cti vuldb.com: https://vuldb.com/cve/CVE-2026-114242 vuldb.com: https://vuldb.com/submit/1018586 github.com: https://github.com/dhikshitha29/Insurance-Management-System/issues/2 github.com: https://github.com/dhikshitha29/Insurance-Management-System/

Credits

🔍 JUNYOU FENG (VulDB User) VulDB CNA Team