CVE-2025-7385 — SQL Injection in GOV CMS
Input from search query parameter in GOV CMS is not sanitized properly, leading to a Blind SQL injection vulnerability, which might be exploited by an unauthenticated remote att…
Published: 2025-09-04 · CVSS: 9.3 · CVSS 4.0
Input from search query parameter in GOV CMS is not sanitized properly, leading to a Blind SQL injection vulnerability, which might be exploited by an unauthenticated remote attacker. Versions 4.0 and above are not affected.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7