8.5
High
CVE-2025-49402 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in scriptsbundle…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in scriptsbundle Exertio Framework exertio-framework allows Blind SQL Injection.This issue affects Exertio Framework: from n/a through <= 1.3.3.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Houzez CRM 1.4 | earliest → 1.4.7 | No fix stated |
| Exertio Framework 1.3 | earliest → 1.3.3 | No fix stated |