← Database

CVE-2025-28983

CRITICAL CVSS: 9.8 Published: 2025-07-04 Modified: 2026-06-17

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ClickandPledge Click & Pledge Connect allows Privilege Escalation. This issue affects Click & Pledge Connect: from 25.04010101 through WP6.8.

Affected Platforms

Unknown

Weakness Type

CWE-89

References