VulnerabilityModified

CVE-2025-7714

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Global Interactive Design Media Software Inc.

CRITICAL 9.8EPSS 0.33%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.33%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Global Interactive Design Media Software Inc. Content Management System (CMS) allows Command Line Execution through SQL Injection. This issue affects Content Management System (CMS): through 21072025.

CVSS 3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.33% probability · 26th percentile
CISA KEV: Not listed
Weakness: CWE-89
Affected: globalmedya/content management system
Source: iletisim@usom.gov.tr

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0008
https://www.usom.gov.tr/bildirim/tr-26-0008Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.