← Database

CVE-2025-39518

HIGH CVSS: 7.6 Published: 2025-04-16 Modified: 2026-06-17

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RedefiningTheWeb BMA Lite bma-lite-appointment-booking-and-scheduling allows SQL Injection.This issue affects BMA Lite: from n/a through <= 1.4.2.

Affected Platforms

Unknown

Weakness Type

CWE-89

References