This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-4239 | BDVDB-2026-320747 Detail

LagomWHMCS Template

Description#

A vulnerability was found in Lagom WHMCS Template up to 2.3.7. Impacted is an unknown function of the component Datatables. The manipulation results in improperly controlled modification of object prototype attributes. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact low, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
  • CWE-94 Improper Control of Generation of Code ('Code Injection')

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.