VULNERABILITY INTELLIGENCE

CVE-2025-22928

CVSS score9.8 CRITICAL

EPSS probability0.43%

CISA KEVNot currently listed

Published2025-04-03

Last modified2026-06-17

Description

OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the cp_id parameter at /modules/messages/Inbox.php.