CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2025-25221: The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in pdf.php. If...
7.3
CVSS
Description
The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in pdf.php. If this vulnerability is exploited, information in a database may be deleted, altered, or retrieved.
Classification
CVE ID: CVE-2025-25221
CVSS Base Severity: HIGH
CVSS Base Score: 7.3
CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected Products
Vendor: LuxSoft
Product: The LuxCal Web Calendar
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 9.69% (scored less or equal to compared to others)
EPSS Date: 2025-03-19 (when was this score calculated)
References
https://www.luxsoft.eu/?downloadhttps://www.luxsoft.eu/lcforum/viewtopic.php?pid=1984#p1984
https://jvn.jp/en/jp/JVN26024080/