The vulnerability CVE-2025-22519 affects jerodmoore eDoc Easy Tables (versions up to 1.29) and is caused by improper neutralization of special elements in SQL commands, leading to SQL Injection. This allows an attacker with low privileges to execute unauthorized SQL queries, potentially compromising data confidentiality with limited impact on integrity and availability. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) reflects network attack vector, low attack complexity, low privileges required, no user interaction, and a scope change with high confidentiality impact. No patch or official remediation guidance is currently provided.

Successful exploitation could allow an attacker with low privileges to execute arbitrary SQL commands on the affected system, leading to a high impact on data confidentiality. Integrity impact is not indicated, and availability impact is low. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the affected application and monitor for unusual database activity. Avoid exposing the application to untrusted networks if possible.