8.5
High
CVE-2025-23910 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in keighl Menus Plus+…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in keighl Menus Plus+ menus-plus allows SQL Injection.This issue affects Menus Plus+: from n/a through <= 1.9.6.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Menus Plus+ 1.9 | earliest → 1.9.6 | No fix stated |
| Menus Plus+ 1.9 | earliest → 1.9.6 | No fix stated |