CVE-2025-7714highCWE-89

CVE-2025-7714: high-severity vulnerability in Global Interactive Design Media Software Inc.

Time Based SQLi in Global Medya's PHP CMS

Published · Updated

Follow this CVE+ Monitor Content Management System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.4%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Global Interactive Design Media Software Inc. Content Management System (CMS) allows Command Line Execution through SQL Injection. This issue affects Content Management System (CMS): through 21072025.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Global Interactive Design Media Software Inc. · Content Management System (CMS)
Related CVEs — Global Interactive Design Media Software Inc.

In the same product, most dangerous first.

CVE-2025-7713HIGHReflected XSS in Global Medya's PHP CMSEPSS 0.2%