VULNERABILITY INTELLIGENCE

CVE-2025-22785

CVSS score9.3 CRITICAL

EPSS probability3.01%

CISA KEVNot currently listed

Published2025-01-15

Last modified2026-06-17

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ComMotion Course Booking System course-booking-system allows SQL Injection.This issue affects Course Booking System: from n/a through <= 6.0.6.