VULNERABILITY INTELLIGENCE

CVE-2025-8121

CVSS score8.8 HIGH

EPSS probability0.31%

CISA KEVNot currently listed

Published2025-09-30

Last modified2026-06-17

Description

Improper neutralization of input provided by an authorized user in article positioning functionality allows for Blind SQL Injection attacks. This issue affects all 3 templates: www, bip and ww+bip. This product is End-Of-Life and producent will not publish patches for this vulnerability.