CVE-2025-8121

8.7 highEPSS 0.3%

High (8.7) in widzialni pad cms. EPSS 0.3% chance of exploitation in the next 30 days.

Improper neutralization of input provided by an authorized user in article positioning functionality allows for Blind SQL Injection attacks. This issue affects all 3 templates: www, bip and ww+bip. This product is End-Of-Life and producent will not publish patches for this vulnerability.

Severity

CVSS 4.0

8.7 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2025-09-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

widzialni:pad_cms

References

https://cert.pl/posts/2025/09/CVE-2025-7063

Check your stack JSON