CVE-2025-13575
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
A security vulnerability has been detected in code-projects Blog Site 1.0. Impacted is the function category_exists of the file /resources/functions/blog.php of the component Category Handler. Such manipulation of the argument name/field leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. Multiple endpoints are affected.
Risk Assessment
An attacker can execute arbitrary SQL queries, potentially leading to data leakage, modification, or deletion from the database.
Recommendation
Immediately update or patch the application as the exploit is publicly available; implement proper SQL query parameterization.
Other vulnerabilities in code-projects Blog Site
Original NVD description (English source)
A security vulnerability has been detected in code-projects Blog Site 1.0. Impacted is the function category_exists of the file /resources/functions/blog.php of the component Category Handler. Such manipulation of the argument name/field leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. Multiple endpoints are affected.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS