KiotViet Sync, CVE-2025-32573

CVE, Research URL: CVE-2025-32573
Home page URL: Security reports for KiotViet Sync
Application: KiotViet Sync
Published on: Apr 17, 2025
Research Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kiotviet KiotViet Sync allows SQL Injection. This issue affects KiotViet Sync: from n/a through 1.8.3.
Affected versions: Min -, max 1.8.3.
Status: vulnerable