CVE-2025-57263

VX Guestbook version 1.07 is affected by an authenticated SQL injection vulnerability. Attackers with admin access can inject malicious SQL payloads by exploiting the "word" POST parameter within the words.php admin panel . The practical consequence is the ability to execute arbitrary SQL command...