Skip to content
Threat Feed
Subscribe

Product

CodeIgniter4 Framework

1 brief RSS
critical advisory

SQL Injection in CodeIgniter4 Query Builder deleteBatch Method

A SQL injection vulnerability in CodeIgniter4 (CVE-2026-63221) allows unauthenticated attackers to execute arbitrary SQL via improperly handled where() clauses when using the deleteBatch() method.

CodeIgniter4 Framework web-vulnerability sqli codeigniter4
1t 1c