CVE-2025-31911

CVSS 3.1 Score 9.3 of 10 (high)

Details

Published Apr 3, 2025
Updated: Apr 7, 2025
CWE ID 89

Summary

CVE-2025-31911 is an SQL injection vulnerability affecting the Social Share And Social Locker software, from an unknown version up to 1.4.2. The issue stems from improper neutralization of special elements used in SQL commands, allowing an attacker to execute blind SQL injection queries. This flaw could potentially grant unauthorized access to sensitive data, modify or delete information, and even take control of the affected system. It is important that users of Social Share And Social Locker upgrade to a patched version as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share