CVE-2025-26533CWE-89

SQL injection risk in course search module list filter

High · published February 24, 2025

CVSS v3.1
8.1
EPSS
1%
Percentile
46.1
In the wild
Unconfirmed
What it is

An SQL injection risk was identified in the module list filter within course search.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00564 · 46.1th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2025-02-24T20:07Z
EPSS history
Timeline
  • 24 FEB 20:07Z
    SQL injection risk in course search module list filter
    cvelistv5