CVE-2025-28057

The owl-admin backend framework, specifically versions v3.2.2 through v4.10.2 , is vulnerable to SQL Injection in the /admin-api/system/admin_menus/save_order endpoint. An attacker can manipulate SQL queries to access or modify unauthorized data within the database. To remediate this, it is recom...