PatchSiren

SALESmanago CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH SALESmanago CVE published 2026-06-25

CVE-2026-54822

A SQL injection vulnerability exists in SALESmanago & Leadoo plugin versions <= 3.11.2. This issue allows a subscriber to inject malicious SQL, potentially leading to data exposure or modification.