{"cvss":0.0,"datePublished":"","dateUpdated":"","description":"Custom CSS JS PHP <= 2.0.7 - Unauthenticated SQL Injection to RCE | Affected: Custom css-js-php / Custom CSS JS PHP | CVSS: 7.3 (HIGH) | EPSS: 0.00807 | Used in malware: unknown | Not yet in CISA KEV: True","dueDate":"","exploited":true,"id":"CVE-2026-6433","kev_catalogs":["circl"],"knownRansomwareCampaignUse":"","product":"Custom CSS JS PHP","severity":"HIGH","source":"circl_kev","title":"CVE-2026-6433","vendor":""}