Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Pro3W CMS if vulnerable to SQL injection attacks. Improper neutralization of input provided into a login form allows an unauthenticated attacker to bypass authentication and gain administrative privileges. This issue was identified in version 1.2.0 of this software. Due to lack of response from the vendor exact version range could not be determined, but the vulnerability should be eliminated in versions released in January 2026 and later.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2025-15498 SQL Injection in Pro3W CMS 1.2.0 Enables Unauthenticated Admin Access https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-15498
Post summary
CVE-2025-15498 is a SQL injection vulnerability in Pro3W CMS 1.2.0 that permits unauthenticated users to gain admin access.
CVE-2025-15498 Pro3W CMS if vulnerable to SQL injection attacks. Improper neutralization of input provided into a login form allows an unauthenticated attacker to bypass authenticat… https://www.cve.org/CVERecord?id=CVE-2025-15498
Post summary
The text announces CVE‑2025‑15498, detailing its SQL injection flaw in Pro3W CMS, but provides no PoC, exploit, or mitigation information.