CVE-2026-6031

CVE-2026-6031 is a SQL injection vulnerability affecting Simple IT Discussion Forum version 1.0 in the /add-category-function.php file, where the Category parameter fails to properly validate user input. The vulnerability allows remote attackers to inject malicious SQL commands without requiring authentication or user interaction. The vulnerability has been assigned a CVSS v3.1 score of 7.3 (HIGH), with a network-based attack vector requiring no special privileges or user involvement. The low attack complexity indicates the exploit is straightforward to execute. Successful exploitation could result in unauthorized data disclosure, modification, and potential availability impacts to the affected system. While exploit code has been publicly disclosed, the vulnerability currently shows no evidence of active exploitation in the wild, as reflected by the 0.0001 EPSS score and its inactive status on the known exploited vulnerabilities list. The moderate FAUCET risk score of 47.0 suggests the vulnerability warrants timely remediation but does not indicate widespread community exploitation at this time. System administrators should apply patches or implement input validation controls to mitigate this risk.