Mura security vulnerabilities

Mura is a content management system developed by Mura Corporation. Versions of Mura prior to 10.1.14 contained security vulnerabilities, which were caused by SQL injection attacks in the getQuery and sortby parameters of the beanFeed.cfc file...

CVE-2025-67829

Mura before 10.1.14 allows beanFeed.cfc getQuery sortDirection SQL injection...

CVE-2025-67829

The Mura content management system, developed by Mura Corporation, is vulnerable to SQL injection in versions prior to 10.1.14 . The root cause is the improper neutralization of special elements in the getQuery sortDirection parameter within the beanFeed.cfc file. This flaw allows an attacker to ...