← All advisories

High severity7.2OSV Advisory· Published Jan 26, 2026· Updated Jun 17, 2026

CVE-2025-59473

CVE-2025-59473

Description

SQL Injection vulnerability in the Structure for Admin authenticated user

Affected products

2

Expressionengine/ExpressionengineOSV2 versions
7.0.0, 7.0.1, 7.0.2, …+ 1 more
- (no CPE)range: 7.0.0, 7.0.1, 7.0.2, …
- cpe:2.3:a:expressionengine:expressionengine:*:*:*:*:*:*:*:*range: >=7.0.0,<7.5.14

Patches

Vulnerability mechanics

References

1

hackerone.com/reports/3249794nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.