CVE-2026-7083

Published April 27th, 2026

View on NVD ↗

CVSS v3

4.7

MEDIUM

CVSS v2

5.8

MEDIUM

Affected

PROJECT

Description

A vulnerability has been found in likeadmin-likeshop likeadmin_php up to 1.9.6. Affected by this issue is the function queryResult of the file server\app\adminapi\lists\tools\DataTableLists.php of the component dataTable Admin API. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

likeadmin-likeshop/likeadmin_php

🌟🌟🌟likeadmin通用管理后台是快速开发前后端的解决方案，使用目前最流行的技术PHP8、TypeScript、ThinkPHP6、Vue3、vite2、Element Plus1.2（ElementUI）。 PHP管理后台、ThtinkPHP管理后台、前后端分离管理后台、Vue3管理后台、Vue.js管理后台、Element Plus管理后台、Element UI管理后台、简单管理后台。

GitHub

339