Threats tagged 'ghsa-h3q5-7qh5-pg2p'

CVE-2025-67650 is an authenticated SQL injection vulnerability in multiple PHP Jabbers scripts, specifically in the Appointment Scheduler product. The flaw arises from improper neutralization of input provided by authenticated users in parameters related to sorting functions, enabling SQL injection attacks. This vulnerability has a high severity score of 8.6 and was published in July 2026. The issue has been fixed in certain versions, though those specific versions are not listed in the provided data.