CVE-2025-50567

Saurus CMS Community Edition version 4.7.1 is vulnerable to a security flaw within the custom DB::prepare() function. The root cause is the use of preg_replace() with the deprecated /e (eval) modifier to interpolate SQL query parameters, which allows for the injection of user-controlled SQL state...