CVE-2026-75497 | Webkul QloApps CustomerMessage.php bo_query sql injection (123c97c)

August 25, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Webkul QloApps. This affects an unknown part of the file CustomerMessage.php. Such manipulation of the argument bo_query leads to sql injection.

This vulnerability is traded as CVE-2026-75497. The attack may be launched remotely. There is no exploit available.

Applying a patch is advised to resolve this issue.VulDB Recent EntriesRead More