A vulnerability categorized as critical has been discovered in itsourcecode News Portal Project 1.0. The affected element is an unknown function of the file /newsportal/admin/edit-category.php. The manipulation of the argument Category results in sql injection.

This vulnerability was named CVE-2026-3134. The attack may be performed from remote. In addition, an exploit is available.