Skip to content
Sign in
9.3 Critical

CVE-2025-52834 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in favethemes Homey…

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in favethemes Homey homey allows SQL Injection.This issue affects Homey: from n/a through <= 2.4.7.

Affected products and versions

Product Affected versions Fixed in
Homey 2.4 earliest → 2.4.7 No fix stated

Other CVEs of Homey

The 3 CVEs of Homey →
CVE-2025-31037 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethemes Homey… 7.1 High CVE-2024-51800 Incorrect Privilege Assignment vulnerability in Favethemes Homey allows Privilege Escalation.This issue affects Homey:… 9.8 Critical
Track this CVE