CVE-2019-6295: Skymoonlabs Cleanto

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Cleanto 5.0 has SQL Injection via the assets/lib/service_method_ajax.php service_id parameter.

Affected products

• Skymoonlabs Cleanto: version 5.0 only

Published 2019-01-15. Last modified 2026-06-17.