CVE-2025-67829

Mura before 10.1.14 allows beanFeed.cfc getQuery sortDirection SQL injection...

CVE-2025-67829

The Mura content management system, developed by Mura Corporation, is vulnerable to SQL injection in versions prior to 10.1.14 . The root cause is the improper neutralization of special elements in the getQuery sortDirection parameter within the beanFeed.cfc file. This flaw allows an attacker to ...

PT-2026-26085

CVE-2025-67829 Mura before 10.1.14 allows beanFeed.cfc getQuery sortDirection SQL injection. https://t.co/EsT6nGpd9g...