Skip to content
Sign in
8.5 High

CVE-2025-68053 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup…

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup xPromoter top_bar_promoter allows Blind SQL Injection.This issue affects xPromoter: from n/a through <= 1.3.4.

Affected products and versions

Product Affected versions Fixed in
xPromoter 1.3 earliest → 1.3.4 No fix stated

Other CVEs of xPromoter

The 2 CVEs of xPromoter →
CVE-2025-49046 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup… 7.1 High
Track this CVE