CVE-2025-25992

MEDIUM 5.1CVE-2025-25992 · Published 14/02/2025 · updated 17/06/2026

In short

CVE-2025-25992 is a MEDIUM (CVSS 5.1) vulnerability affecting feminer wms (feminer wms project).
Chance of exploitation in the next 30 days (EPSS): 0.27%, higher than 19.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
feminer wms feminer_wms_project	`= 1.0`	No fix yet

SQL Injection vulnerability in FeMiner wms 1.0 allows a remote attacker to obtain sensitive information via the inquire_inout_item.php component.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.