Packagist/melisplatform/melis-cms CVE-2025-10351: critical 9.3
Melis Platform CMS SQL Injection
Action: Upgrade melisplatform/melis-cms to 5.3.4 or later.
composer require melisplatform/melis-cms:5.3.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.3.4 | - |
Fixed versions
| 5.3.4 |
Sources
- osv: GHSA-mrmx-jfw8-qhgv
- nvd: CVE-2025-10351
- https://github.com/melisplatform/melis-cms/commit/42d36326d9f6400b91db574483add2747af1db21
- https://github.com/ivansmc00/CVE-2025-10351-POC
- https://github.com/melisplatform/melis-cms
- https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-melis-platform
CVE-2025-10351 · published · modified · JSON