CVE-2023-36076: Pocketmanga Smanga

Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days.

SQL Injection vulnerability in smanga version 3.1.9 and earlier, allows remote attackers to execute arbitrary code and gain sensitive information via mediaId, mangaId, and userId parameters in php/history/add.php.

Affected products

• Pocketmanga Smanga: up to and including 3.1.9

Published 2023-09-01. Last modified 2026-06-17.