Pixelyoursite Boost vulnerabilities

• microsoft boost Boost <= 2.0.3 - Unauthenticated PHP Object Injection via STYXKEY-BOOST_USER_LOCATION Cookie CVE-2026-7637 9.8 CriticalMay 20, 2026
• microsoft boost Boost <= 2.0.3 - Unauthenticated Blind SQL Injection via Multiple Parameters CVE-2026-9010 7.5 HighMay 20, 2026