CVE-2026-62048: SQL Injection

Published Nov 1, 2026

Updated

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP BookIt bookit allows SQL Injection.This issue affects BookIt: from n/a through 2.6.0.6.

Event History

Nov 1, 2026

CVE Published

via NVD·04:18 PM

Data Sourced

via NVD·04:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The CVSS vector indicates network-based exploitation with low attack complexity. It requires no privileges and no user interaction.

Which installations should be treated as potentially affected?

BookIt versions through 2.6.0.6 are listed as affected. The available data does not provide a specific earliest affected version.

What is the expected impact if exploitation succeeds?

The CVSS vector indicates high confidentiality impact and low availability impact. It indicates no integrity impact.

CVE-2026-62048: SQL Injection

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Which installations should be treated as potentially affected?

What is the expected impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Which installations should be treated as potentially affected?

What is the expected impact if exploitation succeeds?