VULNERABILITY INTELLIGENCE
CVE-2025-3893
EPSS probability0.41%
CISA KEVNot currently listed
Published2025-05-23
Last modified2026-06-17
Description
While editing pages managed by MegaBIP a user with high privileges is prompted to give a reasoning for performing this action. Input provided by the the user is not sanitized, leading to SQL Injection vulnerability. Version 5.20 of MegaBIP fixes this issue.
Weakness classification
- cvd@cert.pl: CWE-89