CVE-2023-38382: Subscribe To Category Project Subscribe To Category

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Daniel Söderström / Sidney van de Stouwe Subscribe to Category allows SQL Injection.This issue affects Subscribe to Category: from n/a through 2.7.4.

Affected products

• Subscribe To Category Project Subscribe To Category: up to and including 2.7.4

Published 2023-11-06. Last modified 2026-06-17.