CyberRota
Back to database

CVE-2026-7407

MEDIUM · CVSS 4.7 EPSS 0.01% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-04-29 · Last synced: 2026-05-29

CyberRota Analysis

SQL Injection riski içeriyor. Uzaktan istismar edilebilir olabilir.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-7407
Severity
MEDIUM
CVSS
4.7
EPSS
0.01%

Original NVD Description

A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability is the function save_settings of the file /pizzafy/admin/ajax.php?action=save_settings of the component Setting Handler. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.