VULNERABILITY INTELLIGENCE

CVE-2025-11558

CVSS score9.8 CRITICAL

EPSS probability0.48%

CISA KEVNot currently listed

Published2025-10-09

Last modified2026-10-08

Description

A vulnerability was found in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/user_index_search.php. Performing manipulation of the argument Search results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.