Security Advisory
CVE-2025-24612
9.3
CRITICAL
Vulnerability Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ihor Kit Shipping for Nova Poshta nova-poshta-ttn allows SQL Injection.This issue affects Shipping for Nova Poshta: from n/a through <= 1.19.6.
Published Date
January 27, 2025
Official Source
NIST NVD Advisory