CVE-2026-113381 | Osclass up to 8.3.1 Item Model Item.php Item::findUserItems sPattern sql injection

October 20, 2026 Yanac

A vulnerability was found in Osclass up to 8.3.1. It has been rated as critical. Affected by this vulnerability is the function Item::findUserItems of the file oc-includes/osclass/model/Item.php of the component Item Model Handler. This manipulation of the argument sPattern causes sql injection.

This vulnerability appears as CVE-2026-113381. The attack may be initiated remotely. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More