An SQL injection vulnerability (CVE-2025-52425) affects QuMagie, allowing remote attackers to execute unauthorized code or commands. The vulnerability has been fixed in QuMagie version 2.7.0 and later. The flaw is critical with a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability.