CVE-2025-8921

CWE-74CWE-89SQL Injection3 documents3 sources
Severity
6.9MEDIUM
EPSS
0.0%
top 86.81%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedAug 13

Description

A vulnerability has been found in code-projects Job Diary 1.0. Affected by this issue is some unknown functionality of the file /user-apply.php. The manipulation of the argument job_title leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-7m7x-j7c2-p69f: A vulnerability has been found in code-projects Job Diary 12025-08-13
CVEList
code-projects Job Diary user-apply.php sql injection2025-08-13
CVE-2025-8921 (MEDIUM CVSS 6.9) | A vulnerability has been found in c | cvebase.io