CVE-2025-25221

Publication date

2025-02-18 00:10:25

Family

jpcert

State

PUBLISHED

Description

The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in pdf.php. If this vulnerability is exploited, information in a database may be deleted, altered, or retrieved.