CVE-2026-40331 | Masa CMS up to 7.2.9/7.3.14/7.4.9/7.5.2 feedGateway.cfc setAltTable altTable sql injection (GHSA-jphh-r686-6w7j)

A vulnerability categorized as critical has been discovered in Masa CMS up to 7.2.9/7.3.14/7.4.9/7.5.2. Affected is the function setAltTable of the file feedGateway.cfc. Such manipulation of the argument altTable leads to sql injection.

This vulnerability is referenced as CVE-2026-40331. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.