CVE-2025-25221

—

CVSS 3.1

9.8 critical

EPSS

<1%p39

Published

Feb 18, 2025 (Feb 18, 2025)

Modified

Jun 17, 2026

Description

The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in pdf.php. If this vulnerability is exploited, information in a database may be deleted, altered, or retrieved.

Vendors: luxsoft
Products: luxcal web calendar
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.