CVE-2025-22957

Summary

CVE-2025-22957 is a newly discovered SQL injection vulnerability affecting the front-end of ZZCMS versions prior to 2023. This issue is distinctive because it can be exploited without requiring any form of authentication. Successful exploitation of this vulnerability enables attackers to gain unauthorized access to the underlying database and potentially extract sensitive information, posing a significant risk to data security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.