CVE-2019-14254

CVE-2019-14254 is a critical SQL injection vulnerability affecting Publisure 2.1.2's secure portal, specifically within userAccFunctions.php. This flaw allows unauthenticated attackers to execute arbitrary SQL queries, potentially leading to the compromise of user passwords or privilege escalation to administrator access. With a CVSS score of 9.8 (Critical), it presents a severe risk due to its network-based attack vector and complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.