CVE-2026-116813 | Openpanel-dev OpenPanel up to 2.x Conversion Service ConversionService.getConversion event_names/startDate/endDate sql injection

October 27, 2026 Yanac

A vulnerability classified as critical was found in Openpanel-dev OpenPanel up to 2.x. Impacted is the function ConversionService.getConversion of the component Conversion Service. The manipulation of the argument event_names/startDate/endDate results in sql injection.

This vulnerability is cataloged as CVE-2026-116813. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More