CVE-2025-25222

Publication date

2025-02-18 00:11:03

Family

jpcert

State

PUBLISHED

Description

The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in retrieve.php. If this vulnerability is exploited, information in a database may be deleted, altered, or retrieved.