Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-48281

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mystyleplatform MyStyle Custom Product Designer allows Blind SQL Injection. This issue affects MyStyle Custom Product Designer: from n/a through 3.21.1.

Published

2025-06-09T16:15:44.637

Last Modified

2025-06-12T16:06:47.857

Status

Awaiting Analysis

Source

[email protected]

Severity

CVSSv3.1: 9.3 (CRITICAL)

Weaknesses

Type: Secondary
CWE-89

Affected Vendors & Products

References

https://patchstack.com/database/wordpress/plugin/mystyle-custom-product-designer/vulnerability/wordpress-mystyle-custom-product-designer-3-21-1-sql-injection-vulnerability?_s_id=cve ([email protected])