CVE Catalog
CVE-2026-25405
HighCVSS 8.5Summary
The eRoom plugin version 1.7.1 and earlier contains an SQL Injection vulnerability exploitable by users with Contributor role.
Risk Assessment
The risk includes the possibility of injecting malicious SQL code, leading to data leakage or database corruption.
Recommendation
Update the eRoom plugin to the latest available version that fixes this vulnerability.
Other vulnerabilities in eRoom
Original NVD description (English source)
Contributor SQL Injection in eRoom <= 1.7.1 versions.