4 matches found
CVE-2025-59473
SQL Injection vulnerability in the Structure for Admin authenticated user...
7.2CVSS0.00297EPSS
SaveExploits0References1
CVE-2025-59473
CVE-2025-59473 is a SQL Injection vulnerability affecting the Structure plugin used within ExpressionEngine where admin-authenticated users can exploit missing input sanitization to inject SQL via the channel_ids parameter. The root cause is unsanitized user input being embedded directly in SQL q...
7.2CVSS6.3AI score0.00297EPSS
SaveExploits0References1Affected Software1
20