CVE-2025-24672

Published Jan 24, 2025

Last updated 7 days ago

Overview

Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in codepeople Form Builder CP cp-easy-form-builder allows SQL Injection.This issue affects Form Builder CP: from n/a through <= 1.2.41.
Source
audit@patchstack.com
NVD status
Awaiting Analysis

Weaknesses

audit@patchstack.com
CWE-89

Social media

Hype score
Not currently trending

  1. CVE-2025-24672 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CodePeople Form Builder CP allows SQL Injection. This issue affe… https://t.co/n2Q6ck1OsM

    @CVEnew

    24 Jan 2025

    349 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. [CVE-2025-24672: HIGH] Warning: CodePeople Form Builder CP vulnerable to SQL Injection due to improper neutralization of special elements. Versions affected: n/a - 1.2.41. Update recommended.#cybersecurity,#vulnerability https://t.co/yRfaHPYI0E https://t.co/4th3zSLiPz

    @CveFindCom

    24 Jan 2025

    32 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References

Sources include official advisories and independent security research.