CVE-2023-39344: Fobybus Social-Media-Skeleton

High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days.

social-media-skeleton is an uncompleted social media project. A SQL injection vulnerability in the project allows UNION based injections, which indirectly leads to remote code execution. Commit 3cabdd35c3d874608883c9eaf9bf69b2014d25c1 contains a fix for this issue.

Affected products

• Fobybus Social-Media-Skeleton: version 1.0.0 only

Published 2023-08-04. Last modified 2026-06-17.