CVE-2025-63608

A SQL injection vulnerability exists in CSZ-CMS <=1.3.0 in the Form Builder view functionality

Medium · published October 30, 2025

CVSS v3.1
5.4
EPSS
0%
Percentile
11.5
In the wild
Unconfirmed
What it is

A SQL injection vulnerability exists in CSZ-CMS <=1.3.0 in the Form Builder view functionality. The vulnerability is located in the field parameter of the form viewing feature, allowing authenticated administrators to execute arbitrary SQL queries.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00216 · 11.5th percentile
Published
2025-10-30T00:00Z
EPSS history
Timeline
  • 30 OCT 00:00Z
    A SQL injection vulnerability exists in CSZ-CMS <=1.3.0 in the Form Builder view functionality
    cvelistv5