CVE-2025-56556

The Subrion CMS 4.2.1 PHP-based content management system is vulnerable to privilege escalation due to improper access control within the built-in Run SQL Query feature of the SQL Tool admin panel. Authenticated users with administrator or moderator privileges can exploit this flaw to execute arb...