{"affected":[],"cveId":"CVE-2026-62048","cwes":["CWE-89"],"description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP BookIt bookit allows SQL Injection.This issue affects BookIt: from n/a through 2.6.0.6.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":9.3,"severity":"critical","source":"NVD: audit@patchstack.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","version":"3.1"}],"modifiedAt":1793557091907,"publishedAt":1793549895170,"references":[{"source":"audit@patchstack.com","tags":[],"url":"https://patchstack.com/database/wordpress/plugin/bookit/vulnerability/wordpress-bookit-plugin-2-6-0-6-sql-injection-vulnerability?_s_id=cve"}],"remediation":[],"revision":"7201356c0738671ecf706913945845527b670dd16db27ff7c3620fbee18b1c11","sources":[{"modifiedAt":1793557091907,"name":"NVD","retrievedAt":1793578577334,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62048"}],"ssvc":{"assessedAt":1793553732995,"automatable":"yes","exploitation":"none","source":"NVD SSVC: 134c704f-9b21-4f2e-91b3-4a467353bcc0","technicalImpact":"partial"},"status":"published","title":"CVE-2026-62048","updatedAt":1793578577334}