CVE-2025-8121

Publication date

2025-09-30 10:05:13

Family

CERT-PL

State

PUBLISHED

Description

Improper neutralization of input provided by an authorized user in article positioning functionality allows for Blind SQL Injection attacks. This issue affects all 3 templates: www, bip and ww+bip. This product is End-Of-Life and producent will not publish patches for this vulnerability.