Security Advisory

CVE-2024-25422

9.8
CRITICAL

Vulnerability Description

SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the SEMCMS_Menu.php component.
Published Date February 28, 2024
Official Source NIST NVD Advisory