EIP-2026-114186

The provided text describes an SQL injection vulnerability in the Webplayer plugin's config.php file, where user-supplied input via the 'id' parameter is not properly sanitized. This allows attackers to manipulate SQL queries, potentially compromising the application or underlying database.