CVE-2025-8908

CVE-2025-8908 affects Lingdang CRM up to version 8.6.5.4. A SQL injection vulnerability exists in the file crm/WeiXinApp/yunzhijia/event.php via manipulation of the openid parameter, allowing remote exploitation. Public exploits have been disclosed. Upgrading to 8.6.5 or later patches all SQL inj...