CVE-2025-60269

JEEWMS 20250820 is vulnerable to SQL Injection in the exportXls function located in the src/main/java/org/jeecgframework/web/cgreport/controller/excel/CgExportE…

Critical · published October 10, 2025

CVSS v3.1
9.4
EPSS
0%
Percentile
24.6
In the wild
Unconfirmed
What it is

🚨 A sneaky SQL injection is lurking in JEEWMS 20250820's exportXls function, just waiting for a crafty attacker to pounce! 🔥 Think of it like a restaurant where anyone can just walk into the kitchen and change the menu without anyone noticing—dangerously easy and absolutely devastating! An attacker could exploit this vulnerability to manipulate database queries, potentially leading to unauthorized access to sensitive data, data corruption, or even complete system takeover. Imagine the chaos if attackers can access customer records or financial information!

Put simply

Think of it like a restaurant where anyone can just walk into the kitchen and change the menu without anyone noticing—dangerously easy and absolutely devastating! This SQL injection flaw in the exportXls function allows attackers to craft malicious input that is executed directly against the database, bypassing standard security measures.

What to do

An attacker could exploit this vulnerability to manipulate database queries, potentially leading to unauthorized access to sensitive data, data corruption, or even complete system takeover. Imagine the chaos if attackers can access customer records or financial information! To protect your systems, patch to the latest version immediately. Review and sanitize all user inputs related to database queries to prevent any unauthorized access or data manipulation. Regular security audits will also help catch any lurking weaknesses! You've got this! By following these steps, you'll keep your systems secure and maintain your status as a security hero! 🛡️

The record
Technical detail
CVSS v3.1
9.4 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00328 · 24.6th percentile
Published
2025-10-10T00:00Z
EPSS history
Timeline
  • 10 OCT 00:00Z
    JEEWMS 20250820 is vulnerable to SQL Injection in the exportXls function located in the src/main/java/org/jeecgframework/web/cgreport/controller/excel/CgExportE…
    cvelistv5