CVE-2025-1544

Summary

CVE-2025-1544 is a critical vulnerability affecting the dingfanzu CMS up to version 20250210. This issue lies within an unknown function of the /ajax/loadShopInfo.php file, where manipulation of the shopId argument can lead to SQL injection. The vulnerability enables remote attacks, making it a significant threat. Unfortunately, the exploit has been made public and may already be in use. Despite early disclosure to the vendor, they have yet to respond.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.