EIP-2026-113969

The provided text describes an SQL injection vulnerability in the Plg Novana plugin, where user-supplied input via the 'id' parameter in 'novana_detail.php' is not properly sanitized. This allows attackers to manipulate SQL queries, potentially leading to unauthorized data access or modification.