CVE-2021-37497

9.8 criticalEPSS 1.2%

Critical (9.8) in pbootcms pbootcms. EPSS 1.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request.

Severity

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2023-02-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19