ยท 6 days agoยท Bleeping Computer
Lurking Menace: Ghost CMS Hacked in Massive India-Wide SQL Injection Attack
A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows. [...]
#sql-injection#ghost-cms#clickfix#cybersecurity#web-vulnerability