A vulnerability identified as critical has been detected in itsourcecode News Portal Project 1.0. This vulnerability affects unknown code of the file /admin/index.php of the component Administrator Login. This manipulation of the argument email causes sql injection.

This vulnerability is handled as CVE-2026-2225. The attack can be initiated remotely. Additionally, an exploit exists.