CVE-2021-28245: Pbootcms

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

PbootCMS 3.0.4 contains a SQL injection vulnerability through index.php via the search parameter that can reveal sensitive information through adding an admin account.

Affected products

• Pbootcms Pbootcms: version 3.0.4 only

Published 2021-03-31. Last modified 2026-06-17.