CVE-2025-63608

published 2025-10-30

CVE-2025-63608: A SQL injection vulnerability exists in CSZ-CMS <=1.3.0 in the Form Builder view functionality. The vulnerability is located in the field parameter of the form…

Priority P3 38 medium 5.4 CVSS 3.1

AV N AC L PR L UI N S U C L I L A N

A SQL injection vulnerability exists in CSZ-CMS <=1.3.0 in the Form Builder view functionality. The vulnerability is located in the field parameter of the form viewing feature, allowing authenticated administrators to execute arbitrary SQL queries.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
cszcms	csz_cms	<= 1.3.0	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-89