4 matches found
CVE-2025-59473
SQL Injection vulnerability in the Structure for Admin authenticated user...
7.2CVSS0.00297EPSS
SaveExploits0References1
CVE-2025-59473
SQL Injection vulnerability in the Structure for Admin authenticated user...
6CVSS6AI score
SaveExploits0References3
CVE-2025-59473
SQL Injection vulnerability in the Structure for Admin authenticated user...
6CVSS5.9AI score0.00297EPSS
SaveExploits0References2
CVE-2025-59473
CVE-2025-59473 is a SQL Injection vulnerability affecting the Structure plugin used within ExpressionEngine where admin-authenticated users can exploit missing input sanitization to inject SQL via the channel_ids parameter. The root cause is unsanitized user input being embedded directly in SQL q...
7.2CVSS5.9AI score0.00297EPSS
SaveExploits0References1Affected Software1
20