Threats affecting pkg:npm/windesk.fm

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.4%	CVE-2025-11252Signum Technology Promotion and Training windesk.fm · SQL Injection Critical9.8EPSS 0.4%2026-02-27CVE Database V5CVE-2025-11252 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Signum Technology Promotion and Training Inc. Windesk.Fm allows SQL Injection. This issue affects windesk.Fm: before v2.3.4. NOTE: The vendor patched the vulnerability after the CVE was published. EPSS 0.4%Vulnerability CWE-89	CVE Database V5	2026-02-27

Page 1 of 1